Skip to content
OpenAdvisories

Vendor

ovatheme.com

1 known vulnerabilities.

Products

Event List 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-6366

    Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation

    The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the el_update_profile() function.…

    ovatheme.com Event List Web / CMS