Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (7 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-18050 1 Wordpress-extensions 1 Events Manager 2026-11-11 7.5 High
The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves temporarily stored file uploads, allowing unauthenticated users to retrieve another user's in-progress upload when its temporary identifier is known. The identifier is high-entropy, is disclosed only to the uploader, and the file is removed on submission or by a scheduled cleanup, so a cross-user read is not achievable by guessing alone.
CVE-2026-66457 2 Pixelite, Wordpress-extensions 2 Events Manager, Events Manager 2026-11-11 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.2.
CVE-2026-105068 2 Pixelite, Wordpress-extensions 2 Events Manager, Events Manager 2026-10-25 5.3 Medium
Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retrieve Embedded Sensitive Data.This issue affects Events Manager: from n/a through 7.4.5.
CVE-2026-114694 2 Pixelite, Wordpress-extensions 2 Events Manager, Events Manager 2026-10-24 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8.
CVE-2026-42633 2 Marcus, Wordpress-extensions 2 Events Manager, Events Manager 2026-10-22 8.5 High
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
CVE-2026-42689 2 Pixelite, Wordpress-extensions 2 Events Manager, Events Manager 2026-10-18 3.7 Low
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7.
CVE-2026-93661 1 Wordpress-extensions 1 Events Manager 2026-09-27 2.7 Low
The Events Manager WordPress plugin before 7.4.5 does not stop a ticket-update request from replacing the identifiers of the ticket it was authorized against, letting a user who can manage one event's tickets overwrite and reassign any ticket on the site to their own event.