Pixelite vulnerabilities
We track 5 vulnerabilities in Pixelite products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 24, 2026.
Latest Pixelite vulnerabilities
- 7.1 High severity
Events Manager: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8.
- 7.1 High severity
Events Manager: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.2.
- 7.5 High severity
Events Manager – Calendar, Bookings, Tickets…: Improper Neutralization of Special Elements used in an SQL Command
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and l
- 7.5 High severity
Events Manager – Calendar, Bookings, Tickets…: Improper Neutralization of Special Elements used in an SQL Command
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the active_status parameter in all versions up to, and including, 6.6.3 due to insufficient escaping on the user supplied parameter a
- 8.8 High severity
Meta Tag Manager: Deserialization of Untrusted Data
The Meta Tag Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.2 via deserialization of untrusted input in the get_post_data function. This makes it possible for authenticated attackers, with contribut