Vendor

    Liquid Web / Stellarwp

    37 known vulnerabilities in products by Liquid Web / Stellarwp, 0 of them actively exploited (CISA KEV).

    Key figures

    37

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Liquid Web / Stellarwp
    CriticalCVE-2026-82222

    WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

    		10.0
    CriticalCVE-2026-49772

    WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability

    		9.3
    CriticalCVE-2026-97196

    WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability

    		9.1
    CriticalCVE-2026-97283

    WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2026-95606

    WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2026-62048

    WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-97287

    WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability

    		8.5
    HighCVE-2026-96333

    WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability

    		7.5
    HighCVE-2026-111396

    WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability

    		7.1
    HighCVE-2026-66479

    WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerability

    		7.1
    HighCVE-2026-103354

    Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks: Cross-site Scripting

    		7.1
    MediumCVE-2026-119369

    WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-39742

    Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks: Cross-site Scripting

    		6.5
    MediumCVE-2026-119370

    WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-115602

    Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks: Cross-site Scripting

    		6.5
    MediumCVE-2026-105890

    Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks: Cross-site Scripting

    		6.5
    MediumCVE-2026-110903

    WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-104404

    WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-119368

    WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability

    		5.3
    HighCVE-2026-66599

    WordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-105893

    WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-119367

    WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability

    		5.4
    HighCVE-2026-40780

    WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability

    		7.5
    MediumCVE-2026-105888

    WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2026-106600

    WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability

    		5.3

    All vulnerabilities in search

    Products

    Products by Liquid Web / Stellarwp
    Event Tickets90
    Givewp90
    The Events Calendar70
    Bookit40
    Gutenberg Blocks By Kadence Blocks40