liedekef

Products

ProductCVEsExploitedLatest
Events Made Easy4–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-118634 Medium 6.4 Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute 0.2%
  • CVE-2026-107649 Medium 5.4 Events Made Easy <= 3.2.22 - Unauthenticated Stored Cross-Site Scripting via 'event[location_name]' Parameter 0.2%
  • CVE-2026-75963 High 7.5 Events Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property 0.9%
  • CVE-2023-0404 Medium 5.4 Events Made Easy <= 2.3.16 - Missing Authorization 0.5%