netweblogic Events Manager – Calendar, Bookings, Tickets, and more!

• CVE-2025-14945 Medium 5.4 Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributes 0.3%
• CVE-2026-14280 Medium 6.6 Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys 1.2%
• CVE-2026-17089 Medium 6.1 Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter 0.5%
• CVE-2026-10627 Medium 5.3 Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters 0.6%
• CVE-2026-15023 Medium 6.5 Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action 0.6%
• CVE-2025-12976 Medium 6.4 Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode 0.4%
• CVE-2025-12407 Medium 4.3 Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletion 0.1%
• CVE-2025-12408 Medium 5.3 Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure 0.3%
• CVE-2025-6976 Medium 6.4 Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes 0.3%
• CVE-2025-6975 Medium 6.1 Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter 0.3%
• CVE-2025-6970 High 7.5 Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter 56.4%
• CVE-2024-11260 High 7.5 Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter 0.6%
• CVE-2024-5889 Medium 6.1 Events Manager <= 6.4.8 - Reflected Cross-Site Scripting 0.3%
• CVE-2024-3492 Medium 6.4 Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes 0.3%
• CVE-2024-2110 Medium 4.3 Events Manager <= 6.4.7.1 - Cross-Site Request Forgery 0.2%
• CVE-2024-2111 Medium 6.4 Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-0614 Medium 4.4 Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings 0.7%