VendorsWP Event Managerwp_event_managerall versions
Vulnerabilities

WP Event Manager Wp Event Manager

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2025-2800
WP Event Manager <= 3.1.50 - Unauthenticated Stored Cross-Site Scripting via 'organizer_name'
Published 2025-07-16 · Analyzed
7.2EPSS 0.003
CVE-2023-47697
WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)
Published 2023-11-13 · Modified
7.1EPSS 0.004
CVE-2023-52118
WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Published 2024-02-01 · Modified
6.5EPSS 0.003
CVE-2024-2691
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode
Published 2024-07-16 · Modified
6.4EPSS 0.003
CVE-2022-1474
WP Event Manager < 3.1.28 - Reflected Cross-Site Scripting
Published 2022-07-11 · Modified
6.1EPSS 0.008
CVE-2024-0976
WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin
Published 2024-03-13 · Modified
6.1EPSS 0.006
CVE-2023-49181
WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-15 · Modified
5.9EPSS 0.004
CVE-2021-24810
WP Event Manager < 3.1.23 - Admin+ Stored Cross-Site Scripting
Published 2022-03-07 · Modified
4.8EPSS 0.006
CVE-2023-4423
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Published 2023-09-27 · Modified
4.8EPSS 0.006
CVE-2025-2799
WP Event Manager <= 3.1.49 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published 2025-07-16 · Analyzed
4.8EPSS 0.002