VYPR

Event Manager And Tickets Selling For Woocommerce

by Mage People

CVEs (3)

  • CVE-2022-0478HigMar 14, 2022
    risk 0.57cvss 8.8epss 0.02

    The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the post_author_gutenberg parameter before using it in a SQL statement when creating/editing events, which could allow users with a role as low as contributor to…

  • CVE-2024-24796HigFeb 12, 2024
    risk 0.53cvss 8.2epss 0.01

    Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a…

  • CVE-2024-43138Aug 13, 2024
    risk 0.00cvss epss 0.01

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1.