Medium
CVE-2026-62041
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filters
High
CVE-2025-2800
WP Event Manager <= 3.1.50 - Unauthenticated Stored Cross-Site Scripting via 'organizer_name'
Medium
CVE-2025-2799
WP Event Manager <= 3.1.49 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2025-48125
WP Event Manager <= 3.1.51 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32225
WP Event Manager <= 3.2.0 - Missing Authorization
Medium
CVE-2024-2691
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode
Medium
CVE-2024-0976
WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin
Medium
CVE-2023-49181
WP Event Manager <= 3.1.41 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2023-47697
WP Event Manager <= 3.1.42 - Cross-Site Scripting
Medium
CVE-2023-4423
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1474
WP Event Manager – Easily Build your Calendar of Events! <= 3.1.27 - Stored Cross Site Scripting
Medium
CVE-2021-24810
WP Event Manager <= 3.1.22 - Admin+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.