EE
Product
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
12
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 6Low 0
Watch
Add Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12924 | 6.4 | Jul 10 | Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter Affected: through 4.1.15 |
| CVE-2026-13039 | 5.3 | Jul 10 | Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API Affected: 4.0.26 through 4.1.15 |
| CVE-2025-1766 | 5.3 | Mar 20 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update Affected: through 4.0.24 |
| CVE-2024-1122 | 5.3 | Feb 9 | Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export Affected: through 3.3.50 |
| CVE-2026-4109 | 4.3 | Apr 14 | Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure Affected: through 4.1.8 |
| CVE-2024-6033 | 4.3 | Jul 17 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import Affected: through 4.0.4 |
Showing 6