Roundupwp Registrations For The Events Calendar
6 CVEs affecting Roundupwp Registrations For The Events Calendar. Latest disclosed: 2025-03-25. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24943 | Critical | 9.8 | 2021-12-06 | The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregister_link AJAX action… |
CVE-2024-7982 | Critical | 9.6 | 2024-11-08 | The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, whic… |
CVE-2024-39638 | High | 8.5 | 2024-08-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Roundup WP Registrations for the Events Calendar allows S… |
CVE-2024-10703 | Medium | 6.1 | 2025-03-25 | The Registrations for the Events Calendar WordPress plugin before 2.13.4 does not sanitise and escape some of its settings, which could allow high privilege u… |
CVE-2021-25083 | Medium | 6.1 | 2022-01-24 | The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it back in an attribute in the s… |
CVE-2021-24876 | Medium | 6.1 | 2021-11-29 | The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a… |