Fullworks Plugins vulnerabilities (CVE)

CVE records published for Fullworks Plugins, newest first. Follow to get an email when a new one appears.

2 results

6.5Medium

CVE-2026-123480 6 hours ago

WordPress Display Eventbrite Events plugin <= 6.9.1 - Cross Site Scripting (XSS) vulnerability

Fullworks Plugins Display Eventbrite Events

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fullworks Plugins Display Eventbrite Events widget-for-eventbrite-api allows Stored XSS.This issue affects Display Eventbrite Events: from n/a through 6.9.1.

5.3Medium

CVE-2026-108492 29 days ago

WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability

Fullworks Plugins Quick Paypal Payments

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3.