Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Event post — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Event post, with AI-generated Chinese analysis, references, and POCs.

Vendor: N.O.U.S. Open Useful and Simple

CVE ID Title CVSS Severity Published
CVE-2026-65486 WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-07-23
CVE-2025-62042 WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-10-22
CVE-2025-49298 WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-06-06
CVE-2025-46228 WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-04-22
CVE-2025-26923 WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-03-26
CVE-2025-2167 Event post <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 5.4 Medium 2025-03-26
CVE-2025-24585 WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-01-24
CVE-2024-10186 Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode CWE-79 6.4 Medium 2024-11-06
CVE-2024-38735 WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability CWE-98 7.5 High 2024-07-12
CVE-2024-1375 Event post <= 5.9.10 - Cross-Site Request Forgery CWE-352 4.3 Medium 2024-07-12
CVE-2024-1376 Event post <= 5.9.4 - Missing Authorization CWE-284 4.3 Medium 2024-05-24
CVE-2023-49179 WordPress Event post Plugin <= 5.8.6 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium 2023-12-15

All 12 known CVE vulnerabilities affecting Event post with full Chinese analysis, references, and POCs where available.