What’s Vulnerable › Products

Events Made Easy vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Events Made Easy version is affected

Latest Events Made Easy vulnerabilities

• CVE-2026-118634 — Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute (CVSS 6.4)
• CVE-2026-107649 — Events Made Easy <= 3.2.22 - Unauthenticated Stored Cross-Site Scripting via 'event[location_name]' Parameter (CVSS 5.4)
• CVE-2026-75963 — Events Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property (CVSS 7.5)
• CVE-2026-14842 — Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass (CVSS 5.3)
• CVE-2026-14843 — Events Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDOR (CVSS 5.3)
• CVE-2023-28660 — (CVSS 8.8)
• CVE-2023-0404 — Events Made Easy <= 2.3.16 - Missing Authorization (CVSS 5.4)
• CVE-2022-1905 — Events Made Easy < 2.2.81 - Unauthenticated SQLi (CVSS 9.8)
• CVE-2021-25030 — Events Made Easy < 2.2.36 - Subscriber+ SQL Injection (CVSS 8.8)
• CVE-2021-24813 — Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)