https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-28660.htmlhttps://patchthecve.com/cve/CVE-2023-28660.htmlWed, 17 Jun 2026 05:48:29 +0000HIGH 8.8: The Events Made Easy WordPress Plugin, version <= 2.3.14 is affected by an authenticated SQL injection vulnerability in the 'search_name' parameter in the eme_recurrences_list action.https://patchthecve.com/cve/CVE-2023-0404.htmlhttps://patchthecve.com/cve/CVE-2023-0404.htmlWed, 17 Jun 2026 05:25:28 +0000MEDIUM 5.4: The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions related to AJAX actions in versions up to, and including, 2.3.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, tohttps://patchthecve.com/cve/CVE-2022-1905.htmlhttps://patchthecve.com/cve/CVE-2022-1905.htmlWed, 17 Jun 2026 04:23:19 +0000CRITICAL 9.8: The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection