Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32054

Vulnérabilités (CVE)

Guides publiés

349

Publiés ce mois-ci

Filtre par plugin

eventin event calendar event registration tickets booking ai powered

Effacer

MoyenneCVSS 6.4

CVE-2026-12924

XSS stocké, authentifié (Contributeur+), dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.1.15)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.1.15
CVSS: 6.4/10
Correctif: 4.1.16

Défaut de contrôle d'accès, non authentifié, dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (4.0.25 - 4.1.15)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: 4.0.25 - 4.1.15
CVSS: 5.3/10
Correctif: 4.1.16

Défaut de contrôle d'accès dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.1.12)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.1.12
CVSS: 5.3/10
Correctif: 4.1.13

Défaut de contrôle d'accès dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.1.8)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.1.8
CVSS: 5.3/10
Correctif: 4.1.9

Défaut de contrôle d'accès, authentifié (Auteur+), dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.1.8)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.1.8
CVSS: 4.3/10
Correctif: 4.1.9

Injection d'objet PHP, authentifié (Contributeur+), dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.1.3)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.1.3
CVSS: 7.5/10
Correctif: 4.1.4

XSS stocké, non authentifié, dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.0.51)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.0.51
CVSS: 7.2/10
Correctif: 4.0.52

SSRF (Server-Side Request Forgery), non authentifié, dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.0.37)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.0.37
CVSS: 7.2/10
Correctif: 4.0.38

Injection d'objet PHP, authentifié (Contributeur+), dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.0.31)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.0.31
CVSS: 7.5/10
Correctif: 4.0.32

Élévation de privilèges, authentifié (Contributeur+), dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.0.34)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.0.34
CVSS: 8.8/10
Correctif: 4.0.35

XSS réfléchi dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.0.28)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.0.28
CVSS: 6.1/10
Correctif: 4.0.29

Lecture de fichier arbitraire, non authentifié, dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.0.26)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.0.26
CVSS: 7.5/10
Correctif: 4.0.27

7 mai 2025

Lire

1 – 12 sur 24 articles