https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2800.htmlhttps://patchthecve.com/cve/CVE-2025-2800.htmlWed, 17 Jun 2026 09:07:38 +0000HIGH 7.2: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘organizer_name' parameter in all versions up to, and including, 3.1.50 due to insufficient input sanitization and output escaping. This makehttps://patchthecve.com/cve/CVE-2025-2799.htmlhttps://patchthecve.com/cve/CVE-2025-2799.htmlWed, 17 Jun 2026 09:07:38 +0000MEDIUM 4.4: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tag-name’ parameter in all versions up to, and including, 3.1.49 due to insufficient input sanitization and output escaping. This makes it phttps://patchthecve.com/cve/CVE-2024-2691.htmlhttps://patchthecve.com/cve/CVE-2024-2691.htmlWed, 17 Jun 2026 07:25:04 +0000MEDIUM 6.4: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'events' shortcode in all versions up to, and including, 3.1.43 due to insufficient input sanitization and output escaping on user s