Vulnerabilities > E Dynamics > Events Made Easy > 2.2.43
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-01-19 | CVE-2023-0404 | Missing Authorization vulnerability in E-Dynamics Events Made Easy The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions related to AJAX actions in versions up to, and including, 2.3.16. | 5.4 |
| 2022-06-20 | CVE-2022-1905 | SQL Injection vulnerability in E-Dynamics Events Made Easy The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection | 7.5 |