brightvesseldev vulnerabilities

Products

• Quick Event Manager 3
• Pre-Orders for WooCommerce 1
• Textboxes 1

Latest brightvesseldev CVEs

Newest publication first

1. CVE-2026-84848 WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability

   Published 2026-09-03

   High·CVSS 7.1 EPSS 0.25%

   Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.

2. CVE-2026-84847 WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability

   Published 2026-09-03

   High·CVSS 7.5 EPSS 0.35%

   Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.

3. CVE-2026-84849 WordPress Pre-Orders for WooCommerce plugin <= 2.3 - Bypass Vulnerability vulnerability

   Published 2026-09-03

   Medium·CVSS 6.5 EPSS 0.29%

   Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce <= 2.3 versions.

4. CVE-2024-50469 WordPress Textboxes plugin <= 0.1.3.1 - Cross Site Scripting (XSS) vulnerability

   Published 2024-10-28

   Medium·CVSS 6.5 EPSS 0.27%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through <= 0.1.3.1.

5. CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks

   Published 2024-10-16

   Medium·CVSS 6.3 EPSS 0.44%

   The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.