EE
Product
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
12
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 6Low 0
Watch
Add Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-4796 | 8.8 | Aug 8 | Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover Affected: through 4.0.34 |
| CVE-2025-1770 | 8.8 | Mar 20 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion Affected: through 4.0.24 |
| CVE-2024-7149 | 8.8 | Sep 27 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion Affected: through 4.0.8 |
| CVE-2025-3419 | 7.5 | May 8 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read Affected: through 4.0.26 |
| CVE-2025-14657 | 7.2 | Jan 9 | Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings' Affected: through 4.0.51 |
| CVE-2025-7813 | 7.2 | Aug 23 | Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery Affected: through 4.0.37 |
| CVE-2026-12924 | 6.4 | Jul 10 | Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter Affected: through 4.1.15 |
| CVE-2026-13039 | 5.3 | Jul 10 | Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API Affected: 4.0.26 through 4.1.15 |
| CVE-2025-1766 | 5.3 | Mar 20 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update Affected: through 4.0.24 |
| CVE-2024-1122 | 5.3 | Feb 9 | Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export Affected: through 3.3.50 |
| CVE-2026-4109 | 4.3 | Apr 14 | Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure Affected: through 4.1.8 |
| CVE-2024-6033 | 4.3 | Jul 17 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import Affected: through 4.0.4 |
Showing 12