Approved changes feed: RSS · Atom

cpe:2.3:a:fooevents:fooevents_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFooevents (cdbc282f-1965-527b-842d-31f79a89ded7)
ProductFooevents For Woocommerce (b32d9d76-eca5-50cc-8fd2-e33456fdddd6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-69045 vulnerable 2026-06-08 07:41:22.084541 WordPress FooEvents for WooCommerce plugin <= 1.20.4 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FooEvents FooEvents for WooCommerce fooevents allows SQL Injection.This issue affects FooEvents for WooCommerce: from n/a through <= 1.20.4.
Published: 2026-01-22T16:52:19.002Z
Updated: 2026-04-28T20:35:17.822Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6000 vulnerable 2026-06-08 06:58:17.151652 FooEvents for WooCommerce <= 1.19.20 - Improper Authorization to (Contributor+) Arbitrary File Upload
HIGH (7.1)
The FooEvents for WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability setting on the 'display_ticket_themes_page' function in versions up to, and including, 1.19.20. This makes it possible for authenticated attackers with contributor-level capabilities or above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This was partially patched in 1.19.20, and fully patched in 1.19.21.
Published: 2024-06-15T03:18:57.669Z
Updated: 2026-04-08T16:36:00.422Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.