Known vulnerabilities in the Mage Eventpress plugin
18 security advisories have been published for the Mage Eventpress plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Mage Eventpress - Security Vulnerability (CVE-2026-81802) MEDIUM
- Mage Eventpress - Broken Access Control (CVE-2026-17166) MEDIUM
- Mage Eventpress - Security Vulnerability (CVE-2026-45441) HIGH
- Mage Eventpress - Cross-Site Request Forgery (CSRF) (CVE-2024-32110) MEDIUM
- Mage Eventpress - Cross-Site Scripting (XSS) (CVE-2026-25361) HIGH
- Mage Eventpress - Information Disclosure (CVE-2026-32354) MEDIUM
- Mage Eventpress - PHP Object Injection (CVE-2026-23549) CRITICAL
- Mage Eventpress - PHP Object Injection (CVE-2026-24954) HIGH
- Mage Eventpress - Cross-Site Request Forgery (CSRF) (CVE-2026-24942) MEDIUM
- Mage Eventpress - Broken Access Control (CVE-2025-66083) MEDIUM
- Mage Eventpress - Broken Access Control (CVE-2025-66082) MEDIUM
- Mage Eventpress - PHP Object Injection (CVE-2025-54742) HIGH
- Mage Eventpress - Broken Access Control (CVE-2025-54705) MEDIUM
- Mage Eventpress - Cross-Site Scripting (XSS) (CVE-2025-5568) MEDIUM
- Mage Eventpress - PHP Object Injection (CVE-2025-32145) HIGH
- Mage Eventpress - Path Traversal (CVE-2025-30895) HIGH
- Mage Eventpress - Broken Access Control (CVE-2025-30887) MEDIUM
- Mage Eventpress - Cross-Site Scripting (XSS) (CVE-2024-49703) MEDIUM