Vulnerabilities in Liquid Web / StellarWP

39 results
CVE-2026-119369MEDIUMWordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-111396HIGHWordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-42678HIGHWordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-105891MEDIUMWordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-123469MEDIUMWordPress The Events Calendar plugin <= 6.18.3 - Content Injection vulnerabilityEPSS 0.2%CVE-2026-106600MEDIUMWordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39742MEDIUMWordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-110900MEDIUMWordPress BookIt plugin <= 2.6.0.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-105888MEDIUMWordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-34900HIGHWordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-119370MEDIUMWordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-115602MEDIUMWordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-123464MEDIUMWordPress The Events Calendar plugin <= 6.18.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-104675MEDIUMWordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-104404MEDIUMWordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-105890MEDIUMWordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-103354HIGHWordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-110903MEDIUMWordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-66479HIGHWordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerabilityEPSS 0.1%