Themewinter / Eventin
16 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-4796 | Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover | HIGH | 8.8 | Aug 8, 2025 |
| CVE-2025-49321 | WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability | HIGH | 7.1 | Jun 27, 2025 |
| CVE-2025-47539 | WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability | CRITICAL | 9.8 | May 23, 2025 |
| CVE-2025-47445 | WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability | CRITICAL | 9.8 | May 14, 2025 |
| CVE-2025-3419 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read | HIGH | 7.5 | May 8, 2025 |
| CVE-2025-39584 | WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability | HIGH | 7.5 | Apr 16, 2025 |
| CVE-2025-1766 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update | MEDIUM | 5.3 | Mar 20, 2025 |
| CVE-2025-1770 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion | HIGH | 8.8 | Mar 20, 2025 |
| CVE-2025-26964 | WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability | HIGH | 8.8 | Feb 25, 2025 |
| CVE-2024-56213 | WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability | HIGH | 8.8 | Dec 31, 2024 |
| CVE-2023-49756 | WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability | HIGH | 8.8 | Dec 9, 2024 |
| CVE-2024-7149 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion | HIGH | 8.8 | Sep 27, 2024 |
| CVE-2024-39648 | WordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 5.9 | Aug 1, 2024 |
| CVE-2024-37507 | WordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 6.5 | Jul 21, 2024 |
| CVE-2024-6033 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import | MEDIUM | 4.3 | Jul 17, 2024 |
| CVE-2024-1122 | Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export | MEDIUM | 5.3 | Feb 9, 2024 |
Showing 1 to 16 of 16 CVEs