CVE-2018-9020

概要

参考情報

• wp-events-plugin.com/blog/2018/01/15/events-manager-5-8-1-2-security-release · Third Party Advisory
• wordpress.org/plugins/events-manager · Third Party Advisory
• gubello.me/blog/events-manager-authenticated-stored-xss · Exploit
• youtube.com/watch · Third Party Advisory

events manager のその他の脆弱性

• CVE-2025-6976中 5.4The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin…
• CVE-2025-6975中 6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘ca…
• CVE-2025-6970高 7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’…
• CVE-2024-11260高 7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the active_st…
• CVE-2024-5889中 6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘co…