Known vulnerabilities in the Events Manager – Calendar, Bookings, Tickets, and more! plugin
4 security advisories have been published for the Events Manager – Calendar, Bookings, Tickets, and more! plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Events Manager – Calendar, Bookings, Tickets, and more! - Cross-Site Scripting (XSS) (CVE-2026-17089) MEDIUM
- Events Manager – Calendar, Bookings, Tickets, and more! - Path Traversal (CVE-2026-14280) MEDIUM
- Events Manager – Calendar, Bookings, Tickets, and more! - Broken Access Control (CVE-2026-10627) MEDIUM
- Events Manager – Calendar, Bookings, Tickets, and more! - SQL Injection (CVE-2026-15023) MEDIUM