VendorsThemewintereventinany version
Vulnerabilities

Themewinter Eventin any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2025-47539
WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability
Published 2025-05-23 · Modified
9.8EPSS 0.279
CVE-2025-47445
WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability
Published 2025-05-14 · Modified
9.8EPSS 0.051
CVE-2024-7149
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion
Published 2024-09-27 · Analyzed
8.8EPSS 0.010
CVE-2025-1770
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion
Published 2025-03-20 · Analyzed
8.8EPSS 0.009
CVE-2025-26964
WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability
Published 2025-02-25 · Modified
8.8EPSS 0.008
CVE-2025-4796
Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
Published 2025-08-08 · Analyzed
8.8EPSS 0.006
CVE-2023-49756
WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability
Published 2024-12-09 · Modified
8.8EPSS 0.006
CVE-2024-56213
WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability
Published 2024-12-31 · Modified
8.8EPSS 0.006
CVE-2025-39584
WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability
Published 2025-04-16 · Modified
7.5EPSS 0.009
CVE-2025-3419
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read
Published 2025-05-08 · Modified
7.5EPSS 0.007
CVE-2025-49321
WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability
Published 2025-06-27 · Modified
7.1EPSS 0.002
CVE-2024-37507
WordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability
Published 2024-07-21 · Analyzed
6.5EPSS 0.003
CVE-2024-39648
WordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
Published 2024-08-01 · Analyzed
5.9EPSS 0.003
CVE-2024-1122
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
Published 2024-02-09 · Modified
5.3EPSS 0.005
CVE-2025-1766
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update
Published 2025-03-20 · Analyzed
5.3EPSS 0.004
CVE-2024-6033
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import
Published 2024-07-17 · Modified
4.3EPSS 0.004