Mage-people

Event Manager And Tickets Selling For Woocommerce

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-5568

  • EPSS 0.05%
  • Veröffentlicht 07.06.2025 11:17:50
  • Zuletzt bearbeitet 15.07.2025 17:09:32

The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a...

8.8

CVE-2024-43138

  • EPSS 0.67%
  • Veröffentlicht 13.08.2024 12:15:06
  • Zuletzt bearbeitet 12.09.2024 21:11:23

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1.

8.8

CVE-2024-24796

  • EPSS 0.43%
  • Veröffentlicht 12.02.2024 08:15:40
  • Zuletzt bearbeitet 21.11.2024 08:59:43

Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordP...

5.4

CVE-2023-36383

  • EPSS 0.04%
  • Veröffentlicht 18.07.2023 15:15:11
  • Zuletzt bearbeitet 21.11.2024 08:09:38

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 3.9.5 versions.

4.8

CVE-2023-28422

  • EPSS 0.08%
  • Veröffentlicht 23.03.2023 12:15:13
  • Zuletzt bearbeitet 21.11.2024 07:55:01

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce <= 3.8.6. versions.

5.4

CVE-2023-0144

Exploit
  • EPSS 0.2%
  • Veröffentlicht 06.02.2023 20:15:13
  • Zuletzt bearbeitet 26.03.2025 14:15:26

The Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin before 3.8.0 does not validate and escape some of its post meta before outputting them back in a page/post, which could allow users with the contributor role and above to p...

8.8

CVE-2022-0478

Exploit
  • EPSS 0.58%
  • Veröffentlicht 14.03.2022 15:15:09
  • Zuletzt bearbeitet 21.11.2024 06:38:44

The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the post_author_gutenberg parameter before using it in a SQL statement when creating/editing events, which could allow users with a role ...