CVE-2026-123480mediumCWE-79

CVE-2026-123480: medium-severity vulnerability in Fullworks Plugins Display Eventbrite Events

WordPress Display Eventbrite Events plugin <= 6.9.1 - Cross Site Scripting (XSS) vulnerability

Published 11 Nov 2026

Follow this CVE + Monitor Display Eventbrite Events

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fullworks Plugins Display Eventbrite Events widget-for-eventbrite-api allows Stored XSS.This issue affects Display Eventbrite Events: from n/a through 6.9.1.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Affected products

Fullworks Plugins · Display Eventbrite Events

References

https://patchstack.com/database/wordpress/plugin/widget-for-eventbrite-api/vulnerability/wordpress-display-eventbrite-events-plugin-6-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve