CVE-2025-39482

Description

References

• patchstack.com/database/Wordpress/Plugin/eventer/vulnerability/wordpress-eventer-wordpress-event-booking-manager-plugin-plugin-3-9-6-broken-access-control-vulnerability · Third Party Advisory

Altre vulnerabilità di eventer

• CVE-2025-39481CRITICO 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in imithemes Eventer eventer allows Blind…
• CVE-2025-0959MEDIO 6.5The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the reg_id parameter in all v…
• CVE-2025-22635MEDIO 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes Eventer eventer allows Refle…
• CVE-2024-11134MEDIO 6.5The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'eventer_export_booki…
• CVE-2024-11133MEDIO 5.3The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handle_pdf_download_…