Skip to content
Noroxi

WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

wp-event-manager · plugin

Known security vulnerabilities for WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

latest Jun 9, 2025

Vulnerabilities

  • CVE-2025-48125

    WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability

    High 8.1

  • CVE-2024-0976

    WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin

    Medium 6.1

  • CVE-2023-47697

    WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)

    Medium 6.1

  • CVE-2024-2691

    WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'event

    Medium 5.4

  • CVE-2023-49181

    WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)

    Medium 5.4

  • CVE-2025-32225

    WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2023-4423

    WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting

    Medium 4.8

← Back to directory