CVE-2017-12068: Event List Project Event List

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk action.

Affected products

• Event List Project Event List: version 0.7.9 only

Published 2017-08-01. Last modified 2026-06-17.