3.9.9

DATE	CVE	VULNERABILITY TITLE	RISK
2025-02-03	CVE-2024-11132	Cross-site Scripting vulnerability in Imithemes Eventer The Eventer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.9.9 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity imithemes CWE-79	5.4
2025-02-03	CVE-2024-11134	Missing Authorization vulnerability in Imithemes Eventer The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'eventer_export_bookings_csv' function in all versions up to, and including, 3.9.9. network low complexity imithemes CWE-862	6.5