Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-47164 EUVD-2022-49939GHSA-9rw6-5m3m-gjcc

WordPress Event Manager for WooCommerce Plugin <= 3.7.7 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: MagePeople Team Product: Event Manager and Tickets Selling Plugin for WooCommerce Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 3.7.7 versions.

Affected products

VendorProductAffectedFixed
MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce ≤ 3.7.7 —

References