2.1.4

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-10	CVE-2023-6158	Missing Authorization vulnerability in Myeventon Eventon The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the evo_eventpost_update_meta function in all versions up to, and including, 4.5.4 (for Pro) and 2.2.7 (for free). network low complexity myeventon CWE-862	6.5
2023-10-16	CVE-2023-4388	Unspecified vulnerability in Myeventon Eventon The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) network low complexity myeventon	4.8
2020-11-30	CVE-2020-29395	Cross-site Scripting vulnerability in Myeventon Eventon The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field. network low complexity myeventon CWE-79	6.1