jackdewey vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20257
3. 20267

Newest CVEs

• CVE-2026-15090

  Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter

  jackdewey · Link Library

  High7.5
• CVE-2026-18855

  Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter

  jackdewey · Link Library

  Critical9.1
• CVE-2026-2429

  Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field

  jackdewey · Community Events

  Medium4.9
• CVE-2026-1649

  Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter

  jackdewey · Community Events

  Medium4.4
• CVE-2026-1252

  Events Listing Widget <= 1.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field

  jackdewey · Events Listing Widget

  Medium6.4
• CVE-2026-1401

  Tune Library <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via CSV Import

  jackdewey · Tune Library

  Medium6.4
• CVE-2025-14029

  Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter

  jackdewey · Community Events

  Medium5.3
• CVE-2025-12646

  Community Events <= 1.5.4 - Unauthenticated SQL Injection

  jackdewey · Community Events

  High7.5
• CVE-2025-11995

  Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting

  jackdewey · Community Events

  High7.2
• CVE-2025-10586

  Community Events <= 1.5.1 - Unauthenticated SQL Injection

  jackdewey · Community Events

  Critical9.8