EE
Product
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-4796 | 8.8 | Aug 8 | Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover Affected: through 4.0.34 |
| CVE-2025-14657 | 7.2 | Jan 9 | Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings' Affected: through 4.0.51 |
| CVE-2025-7813 | 7.2 | Aug 23 | Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery Affected: through 4.0.37 |
| CVE-2026-12924 | 6.4 | Jul 10 | Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter Affected: through 4.1.15 |
| CVE-2026-13039 | 5.3 | Jul 10 | Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API Affected: 4.0.26 through 4.1.15 |
| CVE-2026-4109 | 4.3 | Apr 14 | Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure Affected: through 4.1.8 |
Showing 6