WordPress Community Events Vulnerabilities

Wordpress Community Events vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

1 November 2025

Stored Cross-Site Scripting in Community Events Plugin for WordPress
CVE-2025-11995
WordPressCommunity Events7.2HIGH

9 October 2025

SQL Injection Vulnerability in Community Events Plugin for WordPress
CVE-2025-10586
WordPressCommunity Events9.8CRITICAL

8 October 2025

SQL Injection Vulnerability in Community Events Plugin for WordPress
CVE-2025-10587
WordPressCommunity Events9.8CRITICAL

5 August 2024

Cross-Site Scripting Vulnerability in Community Events WordPress Plugin
CVE-2024-6270
WordpressCommunity Events👾🟡

22 July 2024

Arbitrary Event Deletion Vulnerability in Community Events WordPress Plugin
CVE-2024-6271
WordpressCommunity Events👾🟡5.4MEDIUM

23 March 2023

WordPress Community Events Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-44742
WordPressCommunity Events4.8MEDIUM

2 August 2021

Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)
CVE-2021-24496
WordpressCommunity Events6.1MEDIUM

7 September 2017

SQL Injection Vulnerability in WordPress Community Events Plugin
CVE-2015-3313
WordpressCommunity EventsEPSS 18%9.8CRITICAL