Login Request a demo
EV
Product
Eventin
by Themewinter · last CVE Aug 8, 2025
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 2High 8Medium 6Low 0
Severity
All severities16Critical2High8Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Eventin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-49321
6.1
0%
Jun 27
WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability
Affected: before 4.0.29
CVE-2024-37507
5.4
0%
Jul 21
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from…
Affected: before 4.0.0
CVE-2025-1766
5.3
0%
Mar 20
The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on…
Affected: before 4.0.25
CVE-2024-1122
5.3
0%
Feb 9
The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on…
Affected: before 3.3.51
CVE-2024-39648
4.8
0%
Aug 1
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from…
Affected: before 4.0.6
CVE-2024-6033
4.3
0%
Jul 17
The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized data importation due to a missing capability check on the…
Affected: before 4.0.5
Showing 6