ashanjay

Products

Product	CVEs	Exploited	Latest
EventON – Events Calendar	6	–	Aug 15, 2025
EventON	4	–	Mar 5, 2026
LifePress	1	–	May 12, 2026

CVE-2026-6690 High 7.2 LifePress <= 2.2.2 - Unauthenticated Stored Cross-Site Scripting via 'n' Parameter via lp_update_mds AJAX Action 0.2%
CVE-2026-28037 High 7.1 WordPress EventON plugin <= 4.9.12 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-63064 Medium 6.5 WordPress EventON plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-8091 Medium 4.3 EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure 0.5%
CVE-2025-47565 Medium 6.3 WordPress EventON plugin <= 4.9.9 - Broken Access Control vulnerability 0.3%
CVE-2025-47564 Medium 5.3 WordPress EventON plugin <= 4.9.8 - Broken Access Control vulnerability 0.4%
CVE-2024-6180 High 7.2 EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates 0.5%
CVE-2023-6242 Medium 6.5 EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta 0.3%
CVE-2023-6244 Medium 6.5 EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings 0.3%
CVE-2023-6158 Medium 6.5 EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta 0.6%
CVE-2023-4635 Medium 6.1 EventON <= 2.2.2 - Reflected Cross-Site Scripting 0.7%