Approved changes feed: RSS · Atom

cpe:2.3:a:pixelite:events_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPixelite (ca9294d8-0951-5843-924d-fbe8ce37e2a4)
ProductEvents Manager (89b6e197-0f38-58b6-860a-1ea7c4954f57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1249 vulnerable 2026-06-08 07:08:35.985115 WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Events Manager: from n/a through <= 6.6.4.1.
Published: 2025-02-26T14:32:10.186Z
Updated: 2026-04-28T16:10:57.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30515 vulnerable 2026-06-08 06:35:30.497337 WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4.
Published: 2024-06-09T11:00:50.411Z
Updated: 2026-04-28T16:09:25.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30421 vulnerable 2026-06-08 06:35:30.322612 WordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.7.1.
Published: 2024-03-28T08:57:20.426Z
Updated: 2026-04-28T16:09:22.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48326 vulnerable 2026-06-08 06:14:26.891207 WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager allows Reflected XSS.This issue affects Events Manager: from n/a through 6.4.5.
Published: 2023-11-30T11:15:41.035Z
Updated: 2026-04-28T16:08:54.282Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.