Event Manager And Tickets Selling For Woocommerce
Approved changes feed: RSS · Atom
cpe:2.3:a:mage-people:event_manager_and_tickets_selling_for_woocommerce:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Mage People (610c6114-b085-517b-9cde-e882d8a561eb) |
|---|---|
| Product | Event Manager And Tickets Selling For Woocommerce (4bbef22f-4074-519f-85b7-a95db8f27615) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5568 |
vulnerable | 2026-06-08 07:37:25.184718 |
WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-06-07T11:17:50.949Z
Updated: 2026-04-08T17:12:51.844Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43138 |
vulnerable | 2026-06-08 06:45:49.665927 |
WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.2.1 - Local File Inclusion vulnerability
MEDIUM (6.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1.
Published: 2024-08-13T11:35:20.843Z
Updated: 2026-04-28T16:10:08.993Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24796 |
vulnerable | 2026-06-08 06:29:41.786651 |
WordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection
HIGH (8.2)
Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a through 4.1.1.
Published: 2024-02-12T07:47:08.095Z
Updated: 2026-04-28T16:09:10.524Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36383 |
vulnerable | 2026-06-08 06:08:11.239649 |
WordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 3.9.5 versions.
Published: 2023-07-18T14:22:14.471Z
Updated: 2026-04-28T16:08:30.371Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28422 |
vulnerable | 2026-06-08 06:01:10.721236 |
WordPress Event Manager for WooCommerce Plugin <= 3.8.6 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce <= 3.8.6. versions.
Published: 2023-03-23T11:45:07.840Z
Updated: 2026-04-28T16:08:15.751Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0144 |
vulnerable | 2026-06-08 05:52:04.365251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0478 |
vulnerable | 2026-06-08 05:39:10.111858 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.