İçeriğe atla
Noroxi

Eventin

wp-event-solution · eklenti

Eventin için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

35 bilinen açık

2 kritik · 5 kayıt için istismar kodu yayımlanmış · son kayıt 15 Eyl 2026

Güvenlik açıkları

  • CVE-2025-47539

    WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

    Kritik 9.8

  • CVE-2025-47445

    WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability

    Kritik 9.8

  • CVE-2025-68047

    WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability

    Yüksek 8.8

  • CVE-2025-49869

    WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection Vulnerability

    Yüksek 8.8

  • CVE-2025-4796

    Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover

    Yüksek 8.8

  • CVE-2025-1770

    Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion

    Yüksek 8.8

  • CVE-2025-26964

    WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability

    Yüksek 8.8

  • CVE-2024-56213

    WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability

    Yüksek 8.8

  • CVE-2023-49756

    WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability

    Yüksek 8.8

  • CVE-2024-7149

    Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion

    Yüksek 8.8

  • CVE-2026-75983

    Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter

    Yüksek 7.5

  • CVE-2026-15667

    Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter

    Yüksek 7.5

  • CVE-2026-15406

    Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter

    Yüksek 7.5

  • CVE-2025-68045

    WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability

    Yüksek 7.5

  • CVE-2026-40776

    WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability

    Yüksek 7.5

  • CVE-2025-3419

    Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read

    Yüksek 7.5

  • CVE-2025-39584

    WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability

    Yüksek 7.5

  • CVE-2025-14657

    Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross

    Yüksek 7.2

  • CVE-2025-7813

    Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery

    Yüksek 7.2

  • CVE-2026-28173

    WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability

    Yüksek 7.1

  • CVE-2026-82223

    WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability

    Orta 6.5

  • CVE-2026-28174

    WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability

    Orta 6.5

  • CVE-2026-66451

    WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability

    Orta 6.5

  • CVE-2026-15402

    Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter

    Orta 6.4

  • CVE-2026-12924

    Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter

    Orta 6.4

  • CVE-2025-49321

    WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability

    Orta 6.1

  • CVE-2026-11821

    Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint

    Orta 5.4

  • CVE-2024-37507

    WordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability

    Orta 5.4

  • CVE-2026-12956

    Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter

    Orta 5.3

  • CVE-2026-13039

    Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API

    Orta 5.3

  • CVE-2025-1766

    Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update

    Orta 5.3

  • CVE-2024-1122

    Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export

    Orta 5.3

  • CVE-2024-39648

    WordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

    Orta 4.8

  • CVE-2026-15398

    Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion /

    Orta 4.3

  • CVE-2024-6033

    Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import

    Orta 4.3

← Dizine dön