Skip to content
OpenAdvisories

Vendor

FooEvents

2 known vulnerabilities.

Products

FooEvents for WooCommerce 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-69045

    WordPress FooEvents for WooCommerce plugin <= 1.20.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FooEvents FooEvents for WooCommerce fooevents allows SQL Injection.This issue affects FooEvents for WooCommerce: from n/a through <= 1.20.4.

    FooEvents FooEvents for WooCommerce Web / CMS
  • High 7.1
    CVE-2024-6000

    FooEvents for WooCommerce <= 1.19.20 - Improper Authorization to (Contributor+) Arbitrary File Upload

    The FooEvents for WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability setting on the 'display_ticket_themes_page' function in versions up to, and including, 1.19.20. This makes it possible for au…

    FooEvents FooEvents for WooCommerce Web / CMS