Skip to content
Noroxi

Event Monster – Manager & Ticket Booking

event-monster · plugin

Known security vulnerabilities for Event Monster – Manager & Ticket Booking. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 with public exploit code · latest Jun 5, 2026

Vulnerabilities

  • CVE-2024-5059

    WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability

    High 7.5

  • CVE-2024-1895

    Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta

    High 7.5

  • CVE-2023-47525

    WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

    Medium 5.4

  • CVE-2026-8608

    Event Monster <= 2.1.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX Action

    Medium 5.3

  • CVE-2024-11396

    Event monster <= 1.4.3 - Information Exposure Via Visitors List Export

    Medium 5.3

← Back to directory