WpEvently vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WP

Product

WpEvently

by Magepeople inc. · last CVE Oct 26, 2026

7

CVEs

0

On KEV

7.5

Max CVSS

2

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 1Medium 6Low 0

Severity

All severities7 Critical0 High1 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WpEvently to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-114192 New	6.5	0%	Oct 24	WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability Affected: through 5.7.8
CVE-2026-81802	6.5	0%	Sep 8	WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability Affected: through 5.6.0
CVE-2026-81759	5.4	0%	Aug 28	WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability Affected: through 5.5.0
CVE-2026-116394 New	5.3	0%	Oct 26	WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability Affected: through 5.7.9
CVE-2026-81761	4.3	0%	Aug 28	WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability Affected: through 5.5.0
CVE-2024-32110	4.3	0%	Jun 11	WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 4.1.2