Medium 6.3
2024-10-16< 9.2.17
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
9.8.5.3
Update to 9.8.5.3 or later to address 10 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Quick Event Manager Plugin < 9.8.5.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-46863
CVE-2023-23975
CVE-2023-23979
CVE-2023-23974
CVE-2023-23491
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Quick Event Manager plugin < 9.2.17 - Sensitive Information Disclosure vulnerability
WordPress Quick Event Manager plugin < 9.2.17 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability