Community Events vulnerabilities
We track 1 vulnerability in Community Events products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Community Events vulnerabilities
- 8.8 High severity
Community Events: Improper Neutralization of Input During Web Page Generation
The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public event submissions, and does not escape several of the submitted values before outputting them in the administration dashboard and on the publi