EE
Product
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12924 | 6.4 | Jul 10 | Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter Affected: through 4.1.15 |
| CVE-2026-13039 | 5.3 | Jul 10 | Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API Affected: 4.0.26 through 4.1.15 |
| CVE-2026-4109 | 4.3 | Apr 14 | Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure Affected: through 4.1.8 |
Showing 3