WordPress plugin
Event Registration security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical3
- High1
- Medium0
- Low0
All Event Registration vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | PHP Object Injection ≤6.02.02Update to 6.03.01 | — | |
| Critical9.8 | SQL Injection ≤6.02.02Update to 6.03.01 | — | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤6.02.02Update to 6.03.01 | — | |
| Critical9.8 | SQL Injection <6.00.03Update to 6.00.03 | CVE-2010-4839 |
- Critical9.8PHP Object Injection
≤6.02.02Update to 6.03.01
- Critical9.8SQL Injection
≤6.02.02Update to 6.03.01
- High7.2Unauthenticated Stored Cross-Site Scripting
≤6.02.02Update to 6.03.01
- Critical9.8SQL Injection
<6.00.03Update to 6.00.03
Event Registration: common questions
Does Event Registration have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Event Registration: 3 critical, 1 high. None are known to affect version null.
How do I check which version of Event Registration I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Event Registration vulnerability?
2c5bb593-59b5-4760-8d54-14d7665c7e7f, published May 9, 2016: Event Registration <= 6.02.02 - PHP Object Injection. Severity: Critical (CVSS 9.8).
Is any Event Registration vulnerability listed in CISA KEV?
No. None of the known Event Registration vulnerabilities is currently listed in the CISA KEV catalog.