What’s Vulnerable › Products

jackdewey Community Events vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your jackdewey Community Events version is affected

Latest jackdewey Community Events vulnerabilities

• CVE-2026-2429 — Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field (CVSS 4.9)
• CVE-2026-1649 — Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter (CVSS 4.4)
• CVE-2025-14029 — Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter (CVSS 5.3)
• CVE-2025-12646 — Community Events <= 1.5.4 - Unauthenticated SQL Injection (CVSS 7.5)
• CVE-2025-11995 — Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
• CVE-2025-10586 — Community Events <= 1.5.1 - Unauthenticated SQL Injection (CVSS 9.8)
• CVE-2025-10587 — Community Events <= 1.5.1 - Unauthenticated SQL Injection (CVSS 9.8)