TH
Vendor
Themewinter
23
CVEs
0
On KEV
0
New 30D
Products
EV9.8
Eventin
Themewinter
16 CVEs0 on KEV0 new
WP9.8
Wpcafe
Themewinter
6 CVEs0 on KEV0 new
WC6.6
WP Cafe Pro
Themewinter
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-66586 | WC WP Cafe Pro Themewinter | 6.6 | Aug 20 | WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability |
| CVE-2025-4796 | EV Eventin Themewinter | 8.8 | Aug 8 | Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover |
| CVE-2025-49321 | EV Eventin Themewinter | 6.1 | Jun 27 | WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-47539 | EV Eventin Themewinter | 9.8 | May 23 | WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability |
| CVE-2025-47445 | EV Eventin Themewinter | 9.8 | May 14 | Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.26 |
| CVE-2025-3419 | EV Eventin Themewinter | 7.5 | May 8 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the… |
| CVE-2025-39584 | EV Eventin Themewinter | 7.5 | Apr 16 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File… |
| CVE-2025-1770 | EV Eventin Themewinter | 8.8 | Mar 20 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.24 via… |
| CVE-2025-1766 | EV Eventin Themewinter | 5.3 | Mar 20 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on… |
| CVE-2025-26964 | EV Eventin Themewinter | 8.8 | Feb 25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File… |
| CVE-2024-56213 | EV Eventin Themewinter | 8.8 | Dec 31 | WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability |
| CVE-2023-49756 | EV Eventin Themewinter | 8.8 | Dec 9 | Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventin: from… |
| CVE-2023-47805 | WP Wpcafe Themewinter | 9.8 | Dec 9 | Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through… |
| CVE-2024-7149 | EV Eventin Themewinter | 8.8 | Sep 27 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.8 via… |
| CVE-2024-43135 | WP Wpcafe Themewinter | 8.8 | Aug 13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inclusion.This issue affects WPCafe: from… |
| CVE-2024-39648 | EV Eventin Themewinter | 4.8 | Aug 1 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from… |
| CVE-2024-37507 | EV Eventin Themewinter | 5.4 | Jul 21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from… |
| CVE-2024-6033 | EV Eventin Themewinter | 4.3 | Jul 17 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized data importation due to a missing capability check on the… |
| CVE-2024-37513 | WP Wpcafe Themewinter | 8.8 | Jul 9 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows Path Traversal.This issue affects WPCafe: from n/a… |
| CVE-2024-5431 | WP Wpcafe Themewinter | 8.8 | Jun 25 | The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,… |
| CVE-2024-5427 | WP Wpcafe Themewinter | 5.4 | May 31 | The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… |
| CVE-2024-1855 | WP Wpcafe Themewinter | 5.3 | May 23 | The WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation plugin for WordPress is vulnerable to Server-Side Request Forgery in all… |
| CVE-2024-1122 | EV Eventin Themewinter | 5.3 | Feb 9 | The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on… |