🔍 What is Event Monster?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-1895

HIGH CVSS 7.5 Apr 30, 2024

The Event Monster WordPress plugin is vulnerable to PHP object injection through deserialization of untrusted input from custom meta values via shortcodes. This allows authenticated attackers with con...

CVE-2024-11396

MEDIUM CVSS 5.3 Jan 14, 2025

The Event Monster WordPress plugin creates publicly accessible CSV files containing visitor personal data in the wp-content folder. Unauthenticated attackers can extract names, emails, and phone numbe...

CVE-2024-5059

MEDIUM CVSS 5.3 Jun 21, 2024

This vulnerability in the WordPress Event Monster plugin (Event Management Tickets Booking) allows unauthorized actors to access sensitive information. It affects all versions up to 1.4.0, potentially...