Pixelite Vulnerabilities and Affected Products
Vulnerabilities associated with Events Manager.
Products
Clear product- Events Manager3 vulnerabilities
- events_manager1 vulnerability
- Login With Ajax1 vulnerability
- meta_tag_manager1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-30515MEDIUM | WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4. CWE-862Jun 9, 2024 | CVSS4.3v3.1 | EPSS0.323% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-30421MEDIUM | WordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.7.1. CWE-352Mar 28, 2024 | CVSS4.3v3.1 | EPSS0.212% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-48326HIGH | WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager allows Reflected XSS.This issue affects Events Manager: from n/a through 6.4.5. CWE-79Nov 30, 2023 | CVSS7.1v3.1 | EPSS0.403% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |