WpEvently vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WP

Product

WpEvently

by magepeopleteam · last CVE Mar 25, 2026

13

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 1High 5Medium 7Low 0

Severity

All severities13 Critical1 High5 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WpEvently to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-23549	9.8	0%	Feb 19	WordPress WpEvently plugin <= 5.1.1 - PHP Object Injection vulnerability Affected: through 5.1.1
CVE-2026-24954	8.8	0%	Feb 3	WordPress WpEvently plugin <= 5.0.8 - Deserialization of untrusted data vulnerability Affected: through 5.0.8
CVE-2025-54742	8.8	0%	Aug 28	WordPress WpEvently Plugin <= 4.4.8 - PHP Object Injection Vulnerability Affected: through 4.4.8
CVE-2025-32145	8.8	0%	Apr 10	WordPress WpEvently plugin <= 4.3.6 - PHP Object Injection vulnerability Affected: through 4.3.6
CVE-2025-30895	7.5	1%	Mar 27	WordPress WpEvently Plugin <= 4.2.9 - PHP Object Injection vulnerability Affected: through 4.2.9
CVE-2026-25361	7.1	0%	Mar 25	WordPress WpEvently plugin <= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 5.1.4
CVE-2024-49703	6.5	0%	Oct 24	WordPress WpEvently plugin <= 4.2.5 - Cross Site Scripting (XSS) vulnerability Affected: through 4.2.5
CVE-2026-32354	5.3	0%	Mar 13	WordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerability Affected: through 5.1.9
CVE-2025-66083	5.3	0%	Nov 21	WordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerability Affected: through 5.0.4
CVE-2025-66082	5.3	0%	Nov 21	WordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerability Affected: through 5.0.4
CVE-2025-30887	5.3	0%	Mar 27	WordPress WpEvently Plugin <= 4.2.9 - Broken Access Control vulnerability Affected: through 4.2.9
CVE-2026-24942	4.3	0%	Feb 3	WordPress WpEvently plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 5.1.1
CVE-2025-54705	4.3	0%	Aug 14	WordPress WpEvently plugin <= 4.4.6 - Broken Access Control vulnerability Affected: through 4.4.6