metagauss Vulnerability Advisory Catalog

Total 104 security vulnerabilities recorded for metagauss software and firmware.

← Back to All Vendors
CVE-2024-30490 CRITICAL
Component: profilegrid

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects Profile...

📅 2024-03-29
CVSS 9.3 Dossier →
Component: profilegrid

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects Profile...

📅 2024-03-28
CVSS 8.5 Dossier →
Component: eventprime

Cross Site Scripting (XSS) vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9....

📅 2024-03-27
CVSS 5.9 Dossier →
CVE-2024-2951 MEDIUM
Component: registrationmagic

Cross-Site Request Forgery (CSRF) vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.3.0.0....

📅 2024-03-26
CVSS 4.3 Dossier →
Component: eventprime

Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9....

📅 2024-03-23
CVSS 8.2 Dossier →
Component: registrationmagic

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic allows Reflected XSS...

📅 2024-03-19
CVSS 7.1 Dossier →
CVE-2024-1321 MEDIUM
Component: eventprime

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 3.4....

📅 2024-03-13
CVSS 5.3 Dossier →
CVE-2024-1127 MEDIUM
Component: eventprime

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability c...

📅 2024-03-13
CVSS 4.3 Dossier →
CVE-2024-1126 MEDIUM
Component: eventprime

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability c...

📅 2024-03-13
CVSS 4.3 Dossier →
CVE-2024-1320 MEDIUM
Component: eventprime

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'offline_status' para...

📅 2024-03-09
CVSS 6.5 Dossier →
CVE-2024-1125 MEDIUM
Component: eventprime

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability che...

📅 2024-03-09
CVSS 5.4 Dossier →
CVE-2024-1124 MEDIUM
Component: eventprime

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability ch...

📅 2024-03-09
CVSS 4.3 Dossier →
CVE-2024-1123 MEDIUM
Component: eventprime

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi...

📅 2024-03-09
CVSS 6.5 Dossier →
Component: registrationmagic

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic – Custom Registratio...

📅 2024-02-01
CVSS 7.1 Dossier →
CVE-2023-6447 MEDIUM
Component: eventprime

The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password ...

📅 2024-01-22
CVSS 5.3 Dossier →
Component: profilegrid

Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – U...

📅 2024-01-08
CVSS 6.3 Dossier →
Component: registrationmagic

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RegistrationMagic RegistrationMagic – Custom Reg...

📅 2023-12-28
CVSS 7.6 Dossier →
Component: registrationmagic

Cross-Site Request Forgery (CSRF) vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and Us...

📅 2023-11-30
CVSS 4.3 Dossier →
CVE-2023-4252 MEDIUM
Component: eventprime

The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings withou...

📅 2023-11-27
CVSS 5.3 Dossier →
Component: profilegrid

Cross-Site Request Forgery (CSRF) vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects Pro...

📅 2023-11-18
CVSS 5.4 Dossier →
CVE-2023-5519 MEDIUM
Component: eventprime

The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users cre...

📅 2023-10-31
CVSS 4.3 Dossier →
CVE-2023-5238 MEDIUM
Component: eventprime

The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Inject...

📅 2023-10-31
CVSS 6.1 Dossier →
CVE-2023-4251 MEDIUM
Component: eventprime

The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users cre...

📅 2023-10-31
CVSS 4.3 Dossier →
CVE-2023-4250 MEDIUM
Component: eventprime

The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflec...

📅 2023-10-31
CVSS 6.1 Dossier →
Page 3 of 5 (104 Total Records)