CVE-2018-9020

Mô tả

Tham khảo

• wp-events-plugin.com/blog/2018/01/15/events-manager-5-8-1-2-security-release · Third Party Advisory
• wordpress.org/plugins/events-manager · Third Party Advisory
• gubello.me/blog/events-manager-authenticated-stored-xss · Exploit
• youtube.com/watch · Third Party Advisory

Lỗ hổng khác của events manager

• CVE-2025-6976TRUNG BÌNH 5.4The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin…
• CVE-2025-6975TRUNG BÌNH 6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘ca…
• CVE-2025-6970CAO 7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’…
• CVE-2024-11260CAO 7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the active_st…
• CVE-2024-5889TRUNG BÌNH 6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘co…