CVE-2013-7478 The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post. View Full Alert Related Posts CVE-2013-7475The contact-form-plugin plugin before 3.52 for WordPress has XSS. View Full Alert CVE-2013-7476The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. View Full Alert CVE-2013-7477The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. View Full Alert