Vulnerabilities in Event Espresso

4 results

CVE-2017-1002026—Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input vEPSS 1.7%CVE-2025-68007MEDIUMWordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerabilityEPSS 0.3%CVE-2023-27437LOWWordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerabilityEPSS 0.3%CVE-2024-56251MEDIUMWordPress Event Espresso plugin <= 5.0.28.decaf - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%