Community Events Project Community Events
5 CVEs affecting Community Events Project Community Events. Latest disclosed: 2024-08-05. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-3313 | Critical | 9.8 | 2017-09-07 | SQL injection vulnerability in WordPress Community Events plugin before 1.4. |
CVE-2021-24496 | Medium | 6.1 | 2021-08-02 | The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outpu… |
CVE-2024-6271 | Medium | 5.4 | 2024-07-22 | The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin… |
CVE-2024-6270 | Medium | 4.8 | 2024-08-05 | The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to p… |
CVE-2022-44742 | Medium | 4.8 | 2023-03-23 | Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions. |