ashanjay vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20244
3. 20254
4. 20262

Newest CVEs

• CVE-2026-6690

  LifePress <= 2.2.2 - Unauthenticated Stored Cross-Site Scripting via 'n' Parameter via lp_update_mds AJAX Action

  ashanjay · LifePress

  High7.2
• CVE-2026-28037

  WordPress EventON plugin <= 4.9.12 - Reflected Cross Site Scripting (XSS) vulnerability

  ashanjay · EventON

  High7.1
• CVE-2025-63064

  WordPress EventON plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability

  ashanjay · EventON

  Medium6.5
• CVE-2025-8091

  EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure

  ashanjay · EventON – Events Calendar

  Medium4.3
• CVE-2025-47565

  WordPress EventON plugin <= 4.9.9 - Broken Access Control vulnerability

  ashanjay · EventON

  Medium6.3
• CVE-2025-47564

  WordPress EventON plugin <= 4.9.8 - Broken Access Control vulnerability

  ashanjay · EventON

  Medium5.3
• CVE-2024-6180

  EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates

  ashanjay · EventON – Events Calendar

  High7.2
• CVE-2023-6242

  EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta

  ashanjay · EventON – Events Calendar

  Medium6.5
• CVE-2023-6244

  EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings

  ashanjay · EventON – Events Calendar

  Medium6.5
• CVE-2023-6158

  EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta

  ashanjay · EventON – Events Calendar

  Medium6.5