Community Events

Vulnerabilities 15Slug community-eventsLatest version 1.5.9WordPress.org →

Minimum safe version

1.5.9

Update to 1.5.9 or later to address 15 fixable vulnerabilities

Latest available1.5.9 ✓
N/A
2026-02-17< 1.5.8

Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter

WordfenceCVE
N/A
2026-03-06< 1.5.9

Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field

WordfenceCVE
Critical 9.8
2025-10-09< 1.5.2

CVE-2025-10586

CVEWordfence
N/A
< 1.2.3

Community Events &lt;= 1.2.1 - SQL Injection

WPScan
N/A
2015-04-21< 1.3.6

WordPress Community Events Plugin 1.3.5 - SQL Injection

Patchstack
N/A
2011-09-08< 1.2.2

WordPress Community Events Plugin <= 1.2.1 - SQL Injection

Patchstack