Known vulnerabilities in Quick Event Manager

Simple event manager. No messing about, just add events and a shortcode and the plugin does the rest for you.

5Reported vulnerabilities

7.2Highest CVSS score

9.17Latest version

1,000+Active installs

What to do now

Update Quick Event Manager to 9.6.5 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: October 28, 2025 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-23491	Medium 6.1	1.2%	Before 9.7.5	`9.7.5`	January 20, 2023
CVE-2023-23979	High 7.2	0.4%	9.7.4 and earlier	`9.7.5`	January 20, 2023
CVE-2023-23975	Medium 6.3	0.6%	9.7.4 and earlier	`9.7.5`	January 20, 2023
CVE-2023-23974	Medium 6.3	0.2%	9.7.4 and earlier	`9.7.5`	January 20, 2023
CVE-2022-46863	Medium 5.5	0.4%	9.6.4 and earlier	`9.6.5`	February 14, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.