EV
Product
Eventin
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 6Low 0
Watch
Add Eventin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-47539 | 9.8 | May 23 | Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through <= 4.0.26 Affected: before 4.0.27 |
| CVE-2025-47445 | 9.8 | May 14 | Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.26 Affected: before 4.0.27 |
| CVE-2025-4796 | 8.8 | Aug 8 | Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover Affected: before 4.0.35 |
| CVE-2025-1770 | 8.8 | Mar 20 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.24 via… Affected: before 4.0.25 |
| CVE-2025-26964 | 8.8 | Feb 25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File… Affected: before 4.0.21 |
| CVE-2024-56213 | 8.8 | Dec 31 | WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability Affected: before 4.0.9 |
| CVE-2023-49756 | 8.8 | Dec 9 | Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventin: from… Affected: before 3.3.53 |
| CVE-2024-7149 | 8.8 | Sep 27 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.8 via… Affected: before 4.0.9 |
| CVE-2025-3419 | 7.5 | May 8 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the… Affected: before 4.0.27 |
| CVE-2025-39584 | 7.5 | Apr 16 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File… Affected: before 4.0.26 |
| CVE-2025-49321 | 6.1 | Jun 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Eventin wp-event-solution allows Reflected XSS.This issue affects… Affected: before 4.0.29 |
| CVE-2024-37507 | 5.4 | Jul 21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from… Affected: before 4.0.0 |
| CVE-2025-1766 | 5.3 | Mar 20 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on… Affected: before 4.0.25 |
| CVE-2024-1122 | 5.3 | Feb 9 | The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on… Affected: before 3.3.51 |
| CVE-2024-39648 | 4.8 | Aug 1 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from… Affected: before 4.0.6 |
| CVE-2024-6033 | 4.3 | Jul 17 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized data importation due to a missing capability check on the… Affected: before 4.0.5 |
Showing 16