All 8 CVE vulnerabilities found in Events Made Easy, with AI-generated Chinese analysis, references, and POCs.
Vendor: Unknown
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-75963 | Events Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property CWE-98 | 7.5 | High | 2026-08-20 |
| CVE-2026-14842 | Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass | 5.3 | Medium | 2026-08-06 |
| CVE-2026-14843 | Events Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDOR | - | - | 2026-07-31 |
| CVE-2026-59557 | WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability CWE-862 | 6.5 | Medium | 2026-07-27 |
| CVE-2023-0404 | Events Made Easy <= 2.3.16 - Missing Authorization CWE-862 | 5.4 | Medium | 2023-01-19 |
| CVE-2022-1905 | Events Made Easy < 2.2.81 - Unauthenticated SQLi CWE-89 | 9.8 | - | 2022-06-20 |
| CVE-2021-25030 | Events Made Easy < 2.2.36 - Subscriber+ SQL Injection CWE-89 | 8.8 | - | 2022-01-03 |
| CVE-2021-24813 | Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting CWE-79 | 4.8 | - | 2021-11-01 |
All 8 known CVE vulnerabilities affecting Events Made Easy with full Chinese analysis, references, and POCs where available.