Browse CVEs

CRITICAL 9.8 CVE-2025-39481 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in imithemes Eventer eventer allows Blind SQL Inje… Eventer after 3.9.6 Fix from $2,3002025-05-16 HIGH 8.8 CVE-2025-39482 Missing Authorization vulnerability in imithemes Eventer eventer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… Eventer after 3.9.6 Fix from $1,9502025-05-16 MEDIUM 6.5 CVE-2025-0959 The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the reg_id parameter in all versions u… Eventer 3.9.9.3+ Fix from $1,6002025-03-07 MEDIUM 6.1 CVE-2025-22635 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes Eventer eventer allows Reflected XSS.… Eventer 3.9.9+ Fix from $1,6002025-02-23 MEDIUM 6.5 CVE-2024-11134 The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'eventer_export_bookings_csv' … Eventer 3.9.9.1+ Fix from $1,6002025-02-03 MEDIUM 5.4 CVE-2024-11132 The Eventer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.9.9.4 due to insuffi… Eventer after 3.9.9.4 Fix from $1,6002025-02-03 MEDIUM 5.3 CVE-2024-11133 The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handle_pdf_download_request' … Eventer after 3.9.9 Fix from $1,6002025-02-03 HIGH 7.5 CVE-2024-11135 The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventer_get_attendees' function in all versions up … Eventer 3.9.9+ Fix from $1,9502025-01-28 MEDIUM 6.5 CVE-2024-10799 The Eventer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.9.7 via the eventer_woo_download_ticket… Eventer 3.9.8+ Fix from $1,6002025-01-17