Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar vulnerabilities

Product

Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar

by magepeopleteam · last CVE Oct 28, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Vulnerabilities2 In the news0 Timeline

Severity mix

Critical 0High 1Medium 1Low 0

Severity

All severities2 Critical0 High1 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-109381 New	7.2	–	Oct 28	Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter Affected: through 5.7.8
CVE-2026-17166	4.3	0%	Jul 29	Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action Affected: through 5.3.7