EventPress vulnerabilities
We track 1 vulnerability in EventPress products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest EventPress vulnerabilities
- 7.1 High severity
EventPress: Improper Neutralization of Input During Web Page Generation
The EventPress WordPress theme before 22.2 does not sanitize or escape the 'id' parameter in the eventpress_customizer_notify_dismiss_action AJAX handler before outputting it back in the response, allowing unauthenticated attackers to perform Reflected Cross-S