Ashanjay vulnerabilities
We track 3 vulnerabilities in Ashanjay products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.
Latest Ashanjay vulnerabilities
- 7.2 High severity
LifePress: Improper Neutralization of Input During Web Page Generation
The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n' parameter of the lp_update_mds AJAX action in all versions up to, and including, 2.2.2. This is due to the `wp_ajax_nopriv_lp_update_mds` action being registered withou
- 7.1 High severity
EventON: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON eventon allows Reflected XSS.This issue affects EventON: from n/a through <= 4.9.12.
- 7.2 High severity
EventON – Events Calendar: Missing Authorization
The EventON plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eventon_import_settings' ajax action in all versions up to, and including, 2.2.15. This makes it possible for unauthenticated attacker