Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:event_monster:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductEvent Monster (8f37117b-d57c-5427-beeb-d7717c0927d0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3720 vulnerable 2026-06-08 05:48:21.737082 Event Monster < 1.2.1 - Admin+ SQLi
The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injection exploitable by high privilege users
Published: 2022-11-21T00:00:00.000Z
Updated: 2025-04-30T15:32:41.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3336 vulnerable 2026-06-08 05:48:20.567754 Event Monster < 1.2.0 - Visitors Deletion via CSRF
The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arbitrary visitors via a CSRF attack
Published: 2022-11-21T00:00:00.000Z
Updated: 2025-04-30T13:24:20.760Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.