Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Community Events — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Community Events, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-2429 Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field CWE-89 4.9 Medium2026-03-07
CVE-2026-1649 Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter CWE-79 4.4 Medium2026-02-18
CVE-2025-14029 Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter CWE-862 5.3 Medium2026-01-17
CVE-2025-12646 Community Events <= 1.5.4 - Unauthenticated SQL Injection CWE-89 7.5 High2025-11-19
CVE-2025-11995 Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting CWE-79 7.2 High2025-11-01
CVE-2025-10586 Community Events <= 1.5.1 - Unauthenticated SQL Injection CWE-89 9.8 Critical2025-10-09
CVE-2025-10587 Community Events <= 1.5.1 - Unauthenticated SQL Injection CWE-89 9.8 Critical2025-10-08
CVE-2024-6270 Community Events < 1.5.1 - Admin+ Stored XSS 4.8AIMediumAI2024-08-05
CVE-2024-6271 Community Events < 1.5 - Event Deletion via CSRF 4.3AIMediumAI2024-07-22
CVE-2022-44742 WordPress Community Events Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS) CWE-79 4.8 Medium2023-03-23
CVE-2021-24496 Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS) CWE-79 6.1 -2021-08-02

All 11 known CVE vulnerabilities affecting Community Events with full Chinese analysis, references, and POCs where available.