WP FEvents Book

WP FEvents Book has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2023.

All of these findings were reported by Ameen Alkurdy.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all WP FEvents Book vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2023-1126

WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2023-04-03 00:00	WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Stored Cross-Site Scripting WP FEvents Book <= 0.46	`CVE-2023-1126`	6.4 Medium	Ameen Alkurdy	No
2023-04-03 00:00	WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Manipulation WP FEvents Book <= 0.46	`CVE-2023-1129`	6.3 Medium	Ameen Alkurdy	Yes

Showing 1–2 of 2 reports