Medium
CVE-2026-81791
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 34
Reset filters
High
CVE-2026-10033
EventON Action User <= 2.5.14 - Missing Authorization to Unauthenticated Privilege Escalation via evoau_save_capability AJAX Action
Critical
CVE-2026-9711
EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter
Medium
CVE-2026-28037
EventON <= 4.9.12 - Reflected Cross-Site Scripting
Medium
CVE-2025-63064
EventON Pro <= 4.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-8091
EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure
Medium
CVE-2025-47565
EventON <= 4.9.9 - Missing Authorization
Medium
CVE-2025-48116
EventON <= 2.4.4 - Missing Authorization
Medium
CVE-2025-47564
EventON (Pro) <= 4.9.9 - Missing Authorization
Medium
CVE-2025-3527
EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2025-47494
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-32614
EventON <= 2.4 - Unauthenticated Local File Inclusion
High
CVE-2025-32160
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2023-6243
EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email
Medium
CVE-2024-6910
EventON <= 2.2.16 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-6180
EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates
Medium
CVE-2024-33940
EventON <= 2.2.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-7200
EventON <= 4.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-6005
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-0235
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via get_virtual_users
Medium
CVE-2024-0236
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via config_virtual_event
Medium
CVE-2024-0233
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Reflected Cross-Site Scripting
Medium
CVE-2024-0237
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.8 (Pro) & <= 2.2.7 (Free) - Missing Authorization via eventon_save_virtual_event_settings
Medium
CVE-2023-6242
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.