Fullworks vulnerabilities
We track 2 vulnerabilities in Fullworks products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 7, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Fullworks vulnerabilities
- 7.5 High severity
Display Eventbrite Events: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-api allows PHP Local File Inclusion.This issue affects Display Eventbrite Events:
- 7.5 High severity
Quick Paypal Payments: Missing Authorization
Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 5.7.25.