Skip to content
OpenAdvisories

Vendor

Liquid Web / StellarWP

40 known vulnerabilities.

Products

GiveWP 10 The Events Calendar 9 Event Tickets 9 BookIt 4 Gutenberg Blocks by Kadence Blocks 4 Advanced Post Manager 2 WPComplete 2
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-62048

    WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.

    Liquid Web / StellarWP BookIt
  • Critical 9.8
    CVE-2026-95606

    WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4.

    Liquid Web / StellarWP The Events Calendar
  • Critical 9.8
    CVE-2026-97283

    WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5.

    Liquid Web / StellarWP Advanced Post Manager
  • Critical 9.1
    CVE-2026-97196

    WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability

    Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: from n/a through 4.16.9.

    Liquid Web / StellarWP GiveWP
  • Critical 10.0
    CVE-2026-82222 Public exploit Scanner template

    WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

    Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.

    Liquid Web / StellarWP GiveWP
  • Critical 9.3
    CVE-2026-49772 Public exploit Scanner template

    WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind SQL Injection. This issue affects The Events Calendar: from 6.15.12 through 6.16.2.

    Liquid Web / StellarWP The Events Calendar