Liquid WEB / Stellarwp vulnerabilities
39 CVEs and advisories name Liquid WEB / Stellarwp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-123464WordPress The Events Calendar plugin <= 6.18.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-123469WordPress The Events Calendar plugin <= 6.18.3 - Content Injection vulnerability
- CVE-2026-62048WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability
- CVE-2026-62019WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability
- CVE-2026-62047WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability
- CVE-2026-62055WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability
- CVE-2026-119367WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
- CVE-2026-119369WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-119368WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
- CVE-2026-119370WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39742WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115602WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-110902WordPress Event Tickets plugin <= 5.30.1 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-111396WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability
- CVE-2026-110903WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-110900WordPress BookIt plugin <= 2.6.0.5 - Broken Access Control vulnerability
- CVE-2026-96333WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability
- CVE-2026-105893WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
- CVE-2026-105891WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
- CVE-2026-105890WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-105888WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
- CVE-2026-66479WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerability
- CVE-2026-106600WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability
- CVE-2026-95606WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability
- CVE-2026-97283WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability
- CVE-2026-104675WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability
- CVE-2026-104404WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-103354WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-97287WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability
- CVE-2026-97196WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability