Security
فارسی
All products

event-monster

WordPress · Plugin
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Event Monster <= 2.1.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX ActionCVE-2026-8608 event-monster WordPress Medium Fix reported
Event Management Tickets Booking <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settingsCVE-2023-47525 event-monster WordPress Medium Fix reported
Event monster <= 1.4.3 - Information Exposure Via Visitors List ExportCVE-2024-11396 event-monster WordPress Medium Fix reported
Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom MetaCVE-2024-1895 event-monster WordPress High Fix reported
Event Management Tickets Booking <= 1.4.3 - Unauthenticated Information ExposureCVE-2024-5059 event-monster WordPress Medium Fix reported
Event Monster <= 1.2.0 - Authenticated (Administrator+) SQL InjectionCVE-2022-3720 event-monster WordPress High Fix reported
Event Management Tickets Booking By Event Monster Plugin < 1.0.6 - Cross-Site Scripting event-monster WordPress High Fix reported
Event Monster – Event Management, Tickets Booking, Upcoming Event <= 1.1.20 - Cross-Site Request ForgeryCVE-2022-3336 event-monster WordPress High Fix reported