WordPress Vulnerability Scanner WPSec
Vulnerabilities / Events Made Easy

Events Made Easy vulnerabilities

Advisories WPSec published for Events Made Easy. Other sources may list more. Its attack surface: Events Made Easy on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-18 WPSEC-2026-1225 Events Made Easy <= 3.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event HTML Headers and Schema.org JSON-LD Medium 6.4 3.2.25
2026-10-18 WPSEC-2026-1224 Events Made Easy <= 3.2.24 - Authenticated (Editor+) Stored Cross-Site Scripting via Location Name and Address in Location Edit Map Medium 4.8 3.2.25
2026-10-16 WPSEC-2026-1113 Events Made Easy <= 3.2.22 - Unauthenticated Missing Authorization to Invite-Only Event Booking Medium 5.3 3.2.23
2026-10-16 WPSEC-2026-1112 Events Made Easy <= 3.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via Location Map Balloons Medium 6.4 3.2.23
2026-10-16 WPSEC-2026-1111 Events Made Easy <= 3.2.22 - Authenticated (Subscriber+) Missing Authorization via Spoofed Referer Header Medium 4.3 3.2.23
2026-10-16 WPSEC-2026-1110 Events Made Easy <= 3.2.22 - Unauthenticated Insecure Direct Object Reference to Person Record Modification via Booking, Membership and Task Signup Forms Medium 5.3 3.2.23

License: CC BY 4.0