Skip to content
Noroxi

Event Espresso 4 Decaf

event-espresso-decaf · plugin

Known security vulnerabilities for Event Espresso 4 Decaf. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

latest Jan 22, 2026

Vulnerabilities

  • CVE-2025-68007

    WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability

    Medium 6.5

  • CVE-2024-56251

    WordPress Event Espresso plugin <= 5.0.28.decaf - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

  • CVE-2024-6883

    Event Espresso 4 Decaf – Event Registration Event Ticketing <= 4.10.46.decaf- Authenticated (Subscriber+) Missing Authorization to Limited Plugin Settings Modif

    Medium 4.3

  • CVE-2021-4404

    Event Espresso 4 Decaf <= 4.10.11 - Cross-Site Request Forgery Bypass

    Medium 4.3

  • CVE-2023-27437

    WordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerability

    Low 3.7

← Back to directory