Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
event-post
WordPress
· Plugin
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Event Post <= 6.1.1 - Missing Authorization
CVE-2026-107432
event-post
WordPress
Medium
Fix reported
2026-10-13
Event Post <= 6.1.1 - Authenticated (Contributor+) Insecure Direct Object Reference
CVE-2026-107427
event-post
WordPress
Medium
Fix reported
2026-10-13
Event post <= 5.9.4 - Missing Authorization
CVE-2024-1376
event-post
WordPress
Medium
Fix reported
2026-09-09
Event Post <= 6.1.0 - Missing Authorization
CVE-2026-65486
event-post
WordPress
Medium
Fix reported
2026-08-14
Event post <= 5.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-62042
event-post
WordPress
Medium
Fix reported
2025-10-23
Event post <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-49298
event-post
WordPress
Medium
Fix reported
2025-06-11
Event post <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-46228
event-post
WordPress
Medium
Fix reported
2025-04-30
Event post <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-2167
event-post
WordPress
Medium
Fix reported
2025-03-26
Event post <= 5.9.10 - Cross-Site Request Forgery
CVE-2024-1375
event-post
WordPress
Medium
No fix reported
2025-03-21
Event post <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-26923
event-post
WordPress
Medium
Fix reported
2025-03-17
Event post <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-24585
event-post
WordPress
Medium
Fix reported
2025-01-28
Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode
CVE-2024-10186
event-post
WordPress
Medium
Fix reported
2024-11-06
Event post <= 5.9.5 - Unauthenticated Local File Inclusion
CVE-2024-38735
event-post
WordPress
Critical
Fix reported
2024-08-07
Event post <= 5.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
CVE-2023-49179
event-post
WordPress
Medium
Fix reported
2024-03-22