Vulnerabilities / Events Made Easy
Events Made Easy vulnerabilities
Advisories WPSec published for Events Made Easy. Other sources may list more. Its attack surface: Events Made Easy on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-16 | WPSEC-2026-1113 | Events Made Easy <= 3.2.22 - Unauthenticated Missing Authorization to Invite-Only Event Booking | Medium 5.3 | 3.2.23 |
| 2026-10-16 | WPSEC-2026-1112 | Events Made Easy <= 3.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via Location Map Balloons | Medium 6.4 | 3.2.23 |
| 2026-10-16 | WPSEC-2026-1111 | Events Made Easy <= 3.2.22 - Authenticated (Subscriber+) Missing Authorization via Spoofed Referer Header | Medium 4.3 | 3.2.23 |
| 2026-10-16 | WPSEC-2026-1110 | Events Made Easy <= 3.2.22 - Unauthenticated Insecure Direct Object Reference to Person Record Modification via Booking, Membership and Task Signup Forms | Medium 5.3 | 3.2.23 |
License: CC BY 4.0