[ Vendor · 18 CVEs ]
Liquid Web / StellarWP
CVEs affecting Liquid Web / StellarWP published in the last 30 days, plus any Liquid Web / StellarWP CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110902 | 19 Oct 2026 | CVSS 4.3 | Liquid Web / StellarWP Event TicketsAuthorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly… | |
| CVE-2026-110900 | 16 Oct 2026 | CVSS 5.3 | Liquid Web / StellarWP BookItMissing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-110903 | 16 Oct 2026 | CVSS 6.5 | Liquid Web / StellarWP The Events CalendarImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar… | |
| CVE-2026-111396 | 16 Oct 2026 | CVSS 7.1 | Liquid Web / StellarWP Advanced Post ManagerMissing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured… | |
| CVE-2026-96333 | 9 Oct 2026 | CVSS 7.5 | Liquid Web / StellarWP GiveWPAuthentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a… | |
| CVE-2026-66479 | 8 Oct 2026 | CVSS 7.1 | Liquid Web / StellarWP WPCompleteCross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from… | |
| CVE-2026-105891 | 8 Oct 2026 | CVSS 4.3 | Liquid Web / StellarWP Event TicketsMissing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-105893 | 8 Oct 2026 | CVSS 5.3 | Liquid Web / StellarWP Event TicketsAuthorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating… | |
| CVE-2026-106600 | 8 Oct 2026 | CVSS 5.3 | Liquid Web / StellarWP GiveWPMissing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-105888 | 8 Oct 2026 | CVSS 5.4 | Liquid Web / StellarWP Event TicketsMissing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-105890 | 8 Oct 2026 | CVSS 6.5 | Liquid Web / StellarWP Gutenberg Blocks by Kadence BlocksImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by… | |
| CVE-2026-95606 | 7 Oct 2026 | CVSS 9.8 | Liquid Web / StellarWP The Events CalendarDeserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events… | |
| CVE-2026-97283 | 5 Oct 2026 | CVSS 9.8 | Liquid Web / StellarWP Advanced Post ManagerDeserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This… | |
| CVE-2026-104675 | 5 Oct 2026 | CVSS 4.3 | Liquid Web / StellarWP Event TicketsMissing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-104404 | 5 Oct 2026 | CVSS 6.5 | Liquid Web / StellarWP GiveWPImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP give allows… | |
| CVE-2026-103354 | 4 Oct 2026 | CVSS 7.1 | Liquid Web / StellarWP Gutenberg Blocks by Kadence BlocksImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by… | |
| CVE-2026-97287 | 30 Sep 2026 | CVSS 8.5 | Liquid Web / StellarWP Event TicketsImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets… | |
| CVE-2026-97196 | 30 Sep 2026 | CVSS 9.1 | Liquid Web / StellarWP GiveWPImproper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects… |