jackdewey Community Events vulnerabilities

CVEs per yearBy the year they were published

1. 20254
2. 20263

Newest CVEs

• CVE-2026-2429

  Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field

  jackdewey · Community Events

  Medium4.9
• CVE-2026-1649

  Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter

  jackdewey · Community Events

  Medium4.4
• CVE-2025-14029

  Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter

  jackdewey · Community Events

  Medium5.3
• CVE-2025-12646

  Community Events <= 1.5.4 - Unauthenticated SQL Injection

  jackdewey · Community Events

  High7.5
• CVE-2025-11995

  Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting

  jackdewey · Community Events

  High7.2
• CVE-2025-10586

  Community Events <= 1.5.1 - Unauthenticated SQL Injection

  jackdewey · Community Events

  Critical9.8
• CVE-2025-10587

  Community Events <= 1.5.1 - Unauthenticated SQL Injection

  jackdewey · Community Events

  Critical9.8