Skip to content
Lliedekef
Exploited and recent CVEs
-
CVE-2026-118634
Medium 6.4
Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute
0.2%
-
CVE-2026-107649
Medium 5.4
Events Made Easy <= 3.2.22 - Unauthenticated Stored Cross-Site Scripting via 'event[location_name]' Parameter
0.2%
-
CVE-2026-75963
High 7.5
Events Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property
0.9%
-
CVE-2023-0404
Medium 5.4
Events Made Easy <= 2.3.16 - Missing Authorization
0.5%