Browse CVEs

HIGH 8.8 CVE-2025-4796 The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due… Eventin 4.0.35+ Fix from $1,9502025-08-08 MEDIUM 6.1 CVE-2025-49321 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Eventin wp-event-solution allows Refl… Eventin 4.0.29+ Fix from $1,6002025-06-27 CRITICAL 9.8 CVE-2025-47539EPSS 33% Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a … Eventin 4.0.27+ Fix from $2,3002025-05-23 CRITICAL 9.8 CVE-2025-47445EPSS 5% Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.… Eventin 4.0.27+ Fix from $2,3002025-05-14 HIGH 7.5 CVE-2025-3419 The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to,… Eventin 4.0.27+ Fix from $1,9502025-05-08 HIGH 7.5 CVE-2025-39584 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-s… Eventin 4.0.26+ Fix from $1,9502025-04-16 HIGH 8.8 CVE-2025-1770 The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to… Eventin 4.0.25+ Fix from $1,9502025-03-20 MEDIUM 5.3 CVE-2025-1766 The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a… Eventin 4.0.25+ Fix from $1,6002025-03-20 HIGH 8.8 CVE-2025-26964 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-s… Eventin 4.0.21+ Fix from $1,9502025-02-25 HIGH 8.8 CVE-2024-56213 Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <… Eventin 4.0.9+ Fix from $1,9502024-12-31 HIGH 8.8 CVE-2023-49756 Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Eventin 3.3.53+ Fix from $1,9502024-12-09 CRITICAL 9.8 CVE-2023-47805 Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… Wpcafe 2.2.23+ Fix from $2,3002024-12-09 HIGH 8.8 CVE-2024-7149 The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to… Eventin 4.0.9+ Fix from $1,9502024-09-27 HIGH 8.8 CVE-2024-43135 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inclusion.Th… Wpcafe 2.2.29+ Fix from $1,9502024-08-13 MEDIUM 5.4 CVE-2024-37507 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.Th… Eventin 4.0.0+ Fix from $1,6002024-07-21 HIGH 8.8 CVE-2024-37513 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows Path Traversal.This issue a… Wpcafe 2.2.28+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-5431 The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclu… Wpcafe 2.2.26+ Fix from $1,9502024-06-25 MEDIUM 5.4 CVE-2024-5427 The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Sit… Wpcafe 2.2.26+ Fix from $1,6002024-05-31 MEDIUM 5.3 CVE-2024-1855 The WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation plugin for WordPress is vulnerable to Server-S… Wpcafe 2.2.24+ Fix from $1,6002024-05-23 MEDIUM 5.3 CVE-2024-1122 The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to… Eventin 3.3.51+ Fix from $1,6002024-02-09