myeventon
Web & CMS Pluginscommercial
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting myeventon.
- CVE-2025-3527EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting6.4
- CVE-2023-6243EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email4.3
- CVE-2024-6910EventON < 2.2.17 - Admin+ Stored XSS4.8
- CVE-2024-4752EventON < 2.2.15 - Admin+ Stored Cross-Site Scripting via event subtitle5.9
- CVE-2023-7200EventON < 4.4.1 - Reflected Cross-Site Scripting6.1
- CVE-2023-7170EventON-RSVP < 2.9.5 - Reflected XSS6.1
- CVE-2024-0238EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update6.1
- CVE-2024-0235EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure5.3
- CVE-2024-0233EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS6.1
- CVE-2023-6005EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting4.8
- CVE-2024-0236EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure5.3
- CVE-2024-0237EventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update5.3
- CVE-2023-6046EventON < 2.2 - Admin+ Stored HTML Injection4.8
- CVE-2023-6242EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta6.5
- CVE-2023-6244EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings6.5