Ashanjay

11 CVEs across 3 Ashanjay products. Browse Ashanjay vulnerabilities, severities, and proof-of-concept exploits.

Ashanjay products with known CVEs

ProductCVEs
Eventon – Events Calendar6
Eventon4
Lifepress1
Ashanjay CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-6690High7.22026-05-12The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n' parameter of the lp_update_mds AJAX action in all versions up to, a…
CVE-2026-28037High7.12026-03-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON eventon allows Reflected XSS.This issue…
CVE-2025-63064Medium6.52025-12-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON eventon allows Stored XSS.This issue aff…
CVE-2025-8091Medium4.32025-08-15The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the add_single_eventon and add_ev…
CVE-2025-47565Medium6.32025-07-04Missing Authorization vulnerability in ashanjay EventON eventon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Even…
CVE-2025-47564Medium5.32025-05-16Missing Authorization vulnerability in ashanjay EventON eventon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects EventON: fro…
CVE-2024-6180High7.22024-07-09The EventON plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eventon_import_settings' ajax act…
CVE-2023-6244Medium6.52024-01-11The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4…
CVE-2023-6242Medium6.52024-01-11The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4…
CVE-2023-6158Medium6.52024-01-10The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing…
CVE-2023-4635Medium6.12023-10-21The EventON plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in versions up to, and including, 2.2.2 due to insuffi…