NetWebLogic vulnerabilities
19 published CVEs name NetWebLogic among the affected products.
- Published CVEs
- 19
- Last 12 months
- 8
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 16Low 0Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20246
- 20257
- 20265
Newest CVEs
- CVE-2025-14945
Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributes
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium5.4 - CVE-2026-14280
Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium6.6 - CVE-2026-17089
Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium6.1 - CVE-2026-10627
Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium5.3 - CVE-2026-15023
Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium6.5 - CVE-2025-12976
Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium6.4 - CVE-2025-12407
Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletion
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium4.3 - CVE-2025-12408
Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium5.3 - CVE-2025-6976
Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium6.4 - CVE-2025-6975
Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter
netweblogic · Events Manager – Calendar, Bookings, Tickets, and more!
Medium6.1