CVE-2018-13137

概要

参考情報

• ansawaf.blogspot.com/2019/04/cve-2018-13137-xss-in-events-manager.html · Exploit
• gist.github.com/ansarisec/12737c207c0851d52865ed60c08891b7 · Exploit
• wordpress.org/plugins/events-manager · Product
• wpvulndb.com/vulnerabilities/9612

events manager のその他の脆弱性

• CVE-2025-6976中 5.4The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin…
• CVE-2025-6975中 6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘ca…
• CVE-2025-6970高 7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’…
• CVE-2024-11260高 7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the active_st…
• CVE-2024-5889中 6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘co…