Skip to content
OpenAdvisories

Vendor

wpminds

4 known vulnerabilities.

Products

Simple WP Events 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-2004

    Simple WP Events <= 1.8.17 - Unauthenticated Arbitrary File Deletion

    The Simple WP Events plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpe_delete_file AJAX action in all versions up to, and including, 1.8.17. This makes it possible for unauthenticated attackers t…

    wpminds Simple WP Events Web / CMS