Description

WordPress Plugin Events Manager is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Events Manager version 5.5.5 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 5.5.6 or latest

References

http://wp-events-plugin.com/blog/2015/04/02/important-security-update/

Related Vulnerabilities

Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-7943)

WordPress Plugin MyThemeShop Theme/Plugin Updater Cross-Site Scripting (1.2.3)

Oracle JRE CVE-2018-2618 Vulnerability (CVE-2018-2618)

WordPress Plugin WordPress Download Manager Arbitrary File Upload (2.8.97)

CakePHP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-35239)

Severity

High

Tags

Missing Update