CVE-2018-13137 — CVE-2018-13137

CVE-2018-13137

MEDIUM · CVSS 4.8

EPSS exploitation probability: 0%

Published 2019-04-12T18:29:00.367 · Last modified 2026-06-17T01:38:54.700

Summary

The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=event&page=events-manager-options URI.

Affected products

pixelite — events_manager

Does this affect you?

Add your gear to cvedb and we'll alert you only when pixelite ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.