imithemes records

9 published records for vendor imithemes.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 33.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-39481No exploit	WordPress Eventer plugin < 3.11.4 - SQL Injection vulnerabilityimithemes · eventer · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.5%	May 16, 2025
35Monitor	CVE-2025-39482No exploit	WordPress Eventer plugin < 3.11.4 - Broken Access Control vulnerabilityimithemes · eventer · CWE-862 Broken access control (IDOR)	High8.8	—	0.5%	May 16, 2025
30Monitor	CVE-2024-11135No exploit	Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendeesimithemes · eventer · CWE-89 Pre-auth SQL injection	High7.5	—	0.4%	Jan 28, 2025
26Monitor	CVE-2024-10799No exploit	Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Readimithemes · eventer · CWE-22 Path traversal	Medium6.5	—	0.7%	Jan 17, 2025
26Monitor	CVE-2025-0959No exploit	Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_idimithemes · eventer · CWE-564 SQL injection	Medium6.5	—	0.4%	Mar 7, 2025
26Monitor	CVE-2024-11134No exploit	Eventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Exportimithemes · eventer · CWE-862 Broken access control (IDOR)	Medium6.5	—	0.3%	Feb 3, 2025
24Monitor	CVE-2025-22635No exploit	WordPress Eventer - WordPress Event & Booking Manager Plugin plugin < 3.9.9 - Reflected Cross Site Scripting (XSS) vulnerabilityimithemes · eventer · CWE-79 Pre-auth XSS	Medium6.1	—	0.2%	Feb 23, 2025
21Monitor	CVE-2024-11133No exploit	Eventer <= 3.9.9.5 - Missing Authorization to Unauthenticated Event Ticket Downloadimithemes · eventer · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.3%	Feb 3, 2025
21Monitor	CVE-2024-11132No exploit	Eventer <= 3.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeimithemes · eventer · CWE-79 XSS	Medium5.4	—	0.2%	Feb 3, 2025

CVE-2025-39481
39Monitor
WordPress Eventer plugin < 3.11.4 - SQL Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
imithemes · eventerMay 16, 2025
CVE-2025-39482
35Monitor
WordPress Eventer plugin < 3.11.4 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
imithemes · eventerMay 16, 2025
CVE-2024-11135
30Monitor
Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendees
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
imithemes · eventerJan 28, 2025
CVE-2024-10799
26Monitor
Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read
MediumCVSS 6.5No exploitEPSS 0%
- Path traversal
imithemes · eventerJan 17, 2025
CVE-2025-0959
26Monitor
Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id
MediumCVSS 6.5No exploitEPSS 0%
- SQL injection
imithemes · eventerMar 7, 2025
CVE-2024-11134
26Monitor
Eventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Export
MediumCVSS 6.5No exploitEPSS 0%
- Broken access control (IDOR)
imithemes · eventerFeb 3, 2025
CVE-2025-22635
24Monitor
WordPress Eventer - WordPress Event & Booking Manager Plugin plugin < 3.9.9 - Reflected Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
imithemes · eventerFeb 23, 2025
CVE-2024-11133
21Monitor
Eventer <= 3.9.9.5 - Missing Authorization to Unauthenticated Event Ticket Download
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
imithemes · eventerFeb 3, 2025
CVE-2024-11132
21Monitor
Eventer <= 3.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
imithemes · eventerFeb 3, 2025