Events Made Easy — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Events Made Easy, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-28162	WordPress Events Made Easy plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2026-08-24
CVE-2026-75963	Events Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property CWE-98	7.5	High	2026-08-20
CVE-2026-14842	Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass	5.3	Medium	2026-08-06
CVE-2026-14843	Events Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDOR	-	-	2026-07-31
CVE-2026-59557	WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability CWE-862	6.5	Medium	2026-07-27
CVE-2023-0404	Events Made Easy <= 2.3.16 - Missing Authorization CWE-862	5.4	Medium	2023-01-19
CVE-2022-1905	Events Made Easy < 2.2.81 - Unauthenticated SQLi CWE-89	9.8	-	2022-06-20
CVE-2021-25030	Events Made Easy < 2.2.36 - Subscriber+ SQL Injection CWE-89	8.8	-	2022-01-03
CVE-2021-24813	Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting CWE-79	4.8	-	2021-11-01

All 9 known CVE vulnerabilities affecting Events Made Easy with full Chinese analysis, references, and POCs where available.