Liquid Web / StellarWP
Vulnerability activity for Liquid Web / StellarWP: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 21
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 28
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 28
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 9.3CriticalNov 1, 2026Liquid Web / StellarWP BookIt SQL injectionCVE-2026-62048Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.
- 4.3MediumOct 30, 2026Liquid Web / StellarWP Event Tickets Auth bypass / access controlCVE-2026-62047Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.
- 4.3MediumOct 30, 2026Liquid Web / StellarWP BookIt Auth bypass / access controlCVE-2026-62019Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.6.
- 4.3MediumOct 30, 2026Liquid Web / StellarWP Event Tickets Auth bypass / access controlCVE-2026-62055Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.
- 5.4MediumOct 30, 2026Liquid Web / StellarWP The Events Calendar Auth bypass / access controlCVE-2026-119367Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.18.2.
- 6.5MediumOct 30, 2026Liquid Web / StellarWP The Events Calendar XSSCVE-2026-119369Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.2.
- 6.5MediumOct 30, 2026Liquid Web / StellarWP The Events Calendar XSSCVE-2026-119370Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.2.
- 5.3MediumOct 30, 2026Liquid Web / StellarWP The Events Calendar Auth bypass / access controlCVE-2026-119368Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.18.2.
- 6.5MediumOct 29, 2026Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks XSSCVE-2026-39742Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.8.0.2.
- 6.5MediumOct 26, 2026Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks XSSCVE-2026-115602Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.8.0.1.
- 4.3MediumOct 19, 2026Liquid Web / StellarWP Event Tickets Auth bypass / access controlCVE-2026-110902Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.1.
- 7.1HighOct 16, 2026Liquid Web / StellarWP Advanced Post Manager Auth bypass / access controlCVE-2026-111396Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager: from n/a through 4.5.6.
- 6.5MediumOct 16, 2026Liquid Web / StellarWP The Events Calendar XSSCVE-2026-110903Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.1.
- 5.3MediumOct 16, 2026Liquid Web / StellarWP BookIt Auth bypass / access controlCVE-2026-110900Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.5.
- 7.5HighOct 9, 2026Liquid Web / StellarWP GiveWP Auth bypass / access controlCVE-2026-96333Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.
- 7.1HighOct 8, 2026Liquid Web / StellarWP WPComplete CSRFCVE-2026-66479Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6.
- 5.3MediumOct 8, 2026Liquid Web / StellarWP GiveWP Auth bypass / access controlCVE-2026-106600Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0.
- 5.3MediumOct 8, 2026Liquid Web / StellarWP Event Tickets Auth bypass / access controlCVE-2026-105893Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1.
- 4.3MediumOct 8, 2026Liquid Web / StellarWP Event Tickets Auth bypass / access controlCVE-2026-105891Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.
- 6.5MediumOct 8, 2026Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks XSSCVE-2026-105890Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.7.12.
- 5.4MediumOct 8, 2026Liquid Web / StellarWP Event Tickets Auth bypass / access controlCVE-2026-105888Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1.
- 9.8CriticalOct 7, 2026Liquid Web / StellarWP The Events Calendar DeserializationCVE-2026-95606Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4.
- 9.8CriticalOct 5, 2026Liquid Web / StellarWP Advanced Post Manager DeserializationCVE-2026-97283Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5.
- 4.3MediumOct 5, 2026Liquid Web / StellarWP Event Tickets Auth bypass / access controlCVE-2026-104675Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.
- 6.5MediumOct 5, 2026Liquid Web / StellarWP GiveWP XSSCVE-2026-104404Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP: from n/a through 4.17.0.
- 7.1HighOct 4, 2026Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks XSSCVE-2026-103354Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.7.11.1.
- 8.5HighSep 30, 2026Liquid Web / StellarWP Event Tickets SQL injectionCVE-2026-97287Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. This issue affects Event Tickets: from n/a through 5.29.5.
- 9.1CriticalSep 30, 2026Liquid Web / StellarWP GiveWP Auth bypass / access controlCVE-2026-97196Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: from n/a through 4.16.9.
Top products
- Event Tickets8 CVEs in the last year
- The Events Calendar6 CVEs in the last year, 1 critical
- Gutenberg Blocks by Kadence Blocks4 CVEs in the last year
- GiveWP4 CVEs in the last year, 1 critical
- BookIt3 CVEs in the last year, 1 critical
- Advanced Post Manager2 CVEs in the last year, 1 critical
- WPComplete1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.