Browse CVEs

HIGH 7.5 CVE-2025-14844 The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 vi… Restrict Content 3.2.17+ Fix from $1,9502026-01-16 MEDIUM 5.3 CVE-2024-13457 The Event Tickets and Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.18.… Event Tickets 5.18.1.1+ Fix from $1,6002025-01-30 HIGH 7.5 CVE-2024-11090 The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3… Restrict Content 3.2.14+ Fix from $1,9502025-01-26 MEDIUM 6.5 CVE-2024-1316 The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at le… Event Tickets 5.8.1 / 5.9.1+ Fix from $1,6002024-03-04 HIGH 7.5 CVE-2023-47668 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin <= 3.2.7 versions. Restrict Content after 3.2.7 Fix from $1,9502023-11-23 MEDIUM 6.1 CVE-2023-3182 The Membership WordPress plugin before 3.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C… Restrict Content 3.2.3+ Fix from $1,6002023-07-17 MEDIUM 6.1 CVE-2022-45825 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in iThemes WPComplete plugin <= 2.9.2 versions. Wpcomplete 2.9.5+ Fix from $1,6002023-03-28 HIGH 8.8 CVE-2019-16120 CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attend… Event Tickets 4.10.7.2+ Fix from $1,9502019-09-08