Awplife Event Monster
6 CVEs affecting Awplife Event Monster. Latest disclosed: 2025-01-14. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1895 | High | 7.5 | 2024-04-30 | The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inc… |
CVE-2022-3720 | High | 7.2 | 2022-11-21 | The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injec… |
CVE-2023-47525 | Medium | 5.9 | 2023-12-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Event Monster – Event Management, Tickets Booki… |
CVE-2024-11396 | Medium | 5.3 | 2025-01-14 | The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and inc… |
CVE-2024-5059 | Medium | 5.3 | 2024-06-21 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Event Management Tickets Booking.This issue affects Event Management Tick… |
CVE-2022-3336 | Medium | 4.3 | 2022-11-21 | The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arb… |