CVE-2025-4796

< 4.0.35

The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including,

8.8HIGH

CVE-2025-49321

< 4.0.29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Eventin wp-event-s

7.1HIGH

CVE-2025-47539

< 4.0.27

Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects

9.8CRITICAL

CVE-2025-47445

< 4.0.27

Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: fro

7.5HIGH

CVE-2025-3419

< 4.0.27

The Event Manager, Events Calendar, Tickets, Registrations - Eventin plugin for WordPress is vulnerable to arbitrary file read in

7.5HIGH

CVE-2025-39584

< 4.0.26

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics

7.5HIGH

CVE-2025-1770

< 4.0.25

The Event Manager, Events Calendar, Tickets, Registrations - Eventin plugin for WordPress is vulnerable to Local File Inclusion in

8.8HIGH

CVE-2025-1766

< 4.0.25

The Event Manager, Events Calendar, Tickets, Registrations - Eventin plugin for WordPress is vulnerable to unauthorized modificati

5.3MEDIUM

CVE-2025-26964

< 4.0.21

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics

7.5HIGH

CVE-2024-56213

< 4.0.9

Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin:

6.5MEDIUM

CVE-2023-49756

< 3.3.53

Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control

5.4MEDIUM

CVE-2024-7149

< 4.0.9

The Event Manager, Events Calendar, Tickets, Registrations - Eventin plugin for WordPress is vulnerable to Local File Inclusion in

8.8HIGH

CVE-2024-39648

< 4.0.6

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin a

5.9MEDIUM

CVE-2024-37507

< 4.0.0

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin a

6.5MEDIUM

CVE-2024-6033

< 4.0.5

The Event Manager, Events Calendar, Tickets, Registrations - Eventin plugin for WordPress is vulnerable to unauthorized data impor

4.3MEDIUM

CVE-2024-1122

< 3.3.51

The Event Manager, Events Calendar, Events Tickets for WooCommerce - Eventin plugin for WordPress is vulnerable to unauthorized ac

5.3MEDIUM