Liquid Web / Stellarwp vulnerabilities
26 vulnerabilities
Known vulnerabilities in Liquid Web / Stellarwp products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.
Products
7- Givewp8 vulnerabilities
- Event Tickets7 vulnerabilities
- The Events Calendar3 vulnerabilities
- Advanced Post Manager2 vulnerabilities
- Bookit2 vulnerabilities
- Gutenberg Blocks By Kadence Blocks2 vulnerabilities
- Wpcomplete2 vulnerabilities
CVE-2026-110902liquid web / stellarwpevent tickets
EPSS score0.22%
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.1.CVE-2026-111396liquid web / stellarwpadvanced post managerEPSS score0.20%
Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager: from n/a through 4.5.6.CVE-2026-110903liquid web / stellarwpthe events calendarEPSS score0.13%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.1.CVE-2026-110900liquid web / stellarwpbookitEPSS score0.19%
Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.5.CVE-2026-105890liquid web / stellarwpgutenberg blocks by kadence blocks+1EPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.7.12.CVE-2026-105893liquid web / stellarwpevent tickets+1EPSS score0.26%
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1.CVE-2026-105888liquid web / stellarwpevent tickets+1EPSS score0.18%
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.CVE-2026-105891liquid web / stellarwpevent tickets+1EPSS score0.20%
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.CVE-2026-40780liquid web / stellarwpbookit+1EPSS score0.48%
Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation.
This issue affects BookIt: from n/a before 2.5.4.1.CVE-2026-42678liquid web / stellarwpgivewp+1EPSS score0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS.
This issue affects GiveWP: from n/a through 4.14.5.CVE-2026-42662liquid web / stellarwpevent tickets+1EPSS score0.36%
Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.CVE-2026-103354liquid web / stellarwpgutenberg blocks by kadence blocks+1EPSS score0.15%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.7.11.1.CVE-2026-66599liquid web / stellarwpwpcomplete+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.CVE-2026-66479liquid web / stellarwpwpcomplete+1EPSS score0.09%
Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6.CVE-2026-106600liquid web / stellarwpgivewp+1EPSS score0.19%
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0.CVE-2026-104404liquid web / stellarwpgivewp+1EPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP: from n/a through 4.17.0.CVE-2026-104675liquid web / stellarwpevent tickets+1EPSS score0.17%
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.CVE-2026-95606liquid web / stellarwpthe events calendar+1EPSS score0.33%
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection.
This issue affects The Events Calendar: from n/a through 6.17.4.CVE-2026-49772liquid web / stellarwpthe events calendar+1EPSS score0.45%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind SQL Injection.
This issue affects The Events Calendar: from 6.15.12 through 6.16.2.CVE-2026-96333liquid web / stellarwpgivewpEPSS score0.27%
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.