plugin
4 known security issues reported for the Wp Fevents Book WordPress plugin. Most recent disclosed Apr 24, 2023.
Running Wp Fevents Book on your site? Check whether your installed version is affected.
Scan your site free[en] The WP FEvents Book WordPress plugin through 0.46 does not ensures that bookings to be updated belong to the user making the request, allowing any authenticated user to book, add notes, or cancel booking on behalf of other users.
[en] The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks
The WP FEvents Book plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 0.46 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to inject arbit...
The WP FEvents Book plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to insufficient controls on the userID controlled via the showform_fevent6 function in versions up to, and including, 0.46. This makes it possible for authenticated attackers, with minimal p...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free