Skip to content
OpenAdvisories

Vendor

liedekef

4 known vulnerabilities.

Products

Events Made Easy 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-118634

    Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute

    The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 3.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    liedekef Events Made Easy Web / CMS
  • Medium 5.4
    CVE-2026-107649

    Events Made Easy <= 3.2.22 - Unauthenticated Stored Cross-Site Scripting via 'event[location_name]' Parameter

    The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'event[location_name]' parameter in all versions up to, and including, 3.2.22 due to insufficient input sanitization and output escaping. This makes it possible for…

    liedekef Events Made Easy Web / CMS
  • Medium 5.4
    CVE-2023-0404

    Events Made Easy <= 2.3.16 - Missing Authorization

    The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions related to AJAX actions in versions up to, and including, 2.3.16. This makes it possible for authenticated attackers, with s…

    liedekef Events Made Easy Web / CMS