Skip to content
Jjackdewey
Exploited and recent CVEs
-
CVE-2026-15090
High 7.5
Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter
0.4%
-
CVE-2026-18855
Critical 9.1
Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter
1.4%
-
CVE-2026-2429
Medium 4.9
Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field
0.4%
-
CVE-2026-1649
Medium 4.4
Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter
0.3%
-
CVE-2026-1252
Medium 6.4
Events Listing Widget <= 1.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field
0.3%
-
CVE-2026-1401
Medium 6.4
Tune Library <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via CSV Import
0.3%
-
CVE-2025-14029
Medium 5.3
Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter
0.3%
-
CVE-2025-12646
High 7.5
Community Events <= 1.5.4 - Unauthenticated SQL Injection
0.3%
-
CVE-2025-11995
High 7.2
Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting
0.3%
-
CVE-2025-10586
Critical 9.8
Community Events <= 1.5.1 - Unauthenticated SQL Injection
0.5%
-
CVE-2025-10587
Critical 9.8
Community Events <= 1.5.1 - Unauthenticated SQL Injection
0.4%
-
CVE-2025-2889
Medium 6.4
Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters
0.3%
-
CVE-2024-13441
Medium 6.4
Bilingual Linker <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
0.3%
-
CVE-2024-13404
Medium 6.1
Link Library <= 7.7.2 - Reflected Cross-Site Scripting
0.3%
-
CVE-2024-4281
Medium 6.4
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
0.3%
-
CVE-2024-2325
Medium 6.1
Link Library <= 7.6.6 - Reflected Cross-Site Scripting
0.4%
-
CVE-2024-1559
Medium 6.5
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
0.4%