Vulnerabilities / WP Event Aggregator
WP Event Aggregator vulnerabilities
Advisories WPSec published for WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar. Other sources may list more. Its attack surface: WP Event Aggregator on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-30 | WPSEC-2026-1999 | WP Event Aggregator <= 1.9.3 - Authenticated (Subscriber+) Missing Authorization to Meetup OAuth Account Connection Overwrite | Medium 4.3 | 1.9.4 |
| 2026-10-30 | WPSEC-2026-1998 | WP Event Aggregator <= 1.9.3 - Authenticated (Subscriber+) Missing Authorization to Facebook OAuth Account Connection Overwrite | Medium 4.3 | 1.9.4 |
License: CC BY 4.0