FooEvents vulnerabilities
We track 2 vulnerabilities in FooEvents products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest FooEvents vulnerabilities
- 8.5 High severity
FooEvents for WooCommerce: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FooEvents FooEvents for WooCommerce fooevents allows SQL Injection.This issue affects FooEvents for WooCommerce: from n/a through <= 1.20.4.
- 7.1 High severity
FooEvents for WooCommerce: Improper Authorization
The FooEvents for WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability setting on the 'display_ticket_themes_page' function in versions up to, and including, 1.19.20. This makes it possible for aut