Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets

Information

Software Type Plugin
Software Slug mage-eventpress (view on wordpress.org)
Software Status Active
Software Author magepeopleteam
Software Website mage-people.com
Software Downloads 753,518
Software Active Installs 7,000
Software Record Last Updated July 15, 2026

Showing 1-20 of 24 Vulnerabilities

Submit a Vulnerability
Event Booking Manager for WooCommerce <= 5.3.3 - Missing Authorization
5.3
CVE-2026-45441
May 26, 2026
Researcher: dodoh4t
Event Booking Manager for WooCommerce <= 5.1.4 - Reflected Cross-Site Scripting
6.1
CVE-2026-25361
Mar 20, 2026
Researcher: johska
WpEvently <= 5.1.1 - Unauthenticated PHP Object Injection
8.1
CVE-2026-23549
Feb 18, 2026
Researcher: Phat RiO
WpEvently < 5.1.9 - Unauthenticated Information Exposure
4.3
CVE-2026-32354
Feb 14, 2026
Researcher: Bao - BlueRock
WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection
7.5
CVE-2026-24954
Dec 25, 2025
Researcher: Phat RiO
WpEvently <= 5.1.1 - Cross-Site Request Forgery
4.3
CVE-2026-24942
Dec 6, 2025
Researcher: daroo
WpEvently <= 5.0.4 - Missing Authorization
5.3
CVE-2025-66083
Dec 4, 2025
Researcher: Legion Hunter
WpEvently <= 5.0.4 - Missing Authorization
5.3
CVE-2025-66082
Nov 30, 2025
Researcher: Que Thanh Tuan - Blue Rock
WpEvently <= 4.4.8 - Authenticated (Contributor+) PHP Object Injection
7.5
CVE-2025-54742
Aug 27, 2025
Researcher: Ananda Dhakal
WpEvently <= 4.4.6 - Missing Authorization
4.3
CVE-2025-54705
Jul 30, 2025
Researcher: Denver Jackson
WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-5568
Jun 6, 2025
Researcher: siavashvafshar
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
8.8
CVE-2025-32145
Apr 8, 2025
Researcher: LVT-tholv2k
WpEvently <= 4.2.9 - Missing Authorization
5.3
CVE-2025-30887
Mar 27, 2025
Researcher: LVT-tholv2k
WpEvently <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2025-30895
Mar 27, 2025
Researcher: LVT-tholv2k
Event Manager for WooCommerce <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-49703
Oct 21, 2024
Researcher: João Pedro Soares de Alcântara
Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion
9.9
CVE-2024-43138
Aug 7, 2024
Researcher: João G. Barbosa (4rCanJ0x!)
Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout
4.3
CVE-2024-32110
Apr 11, 2024
Researcher: Dhabaleshwar Das
Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently <= 4.1.1 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save
8.8
CVE-2024-24796
Jan 31, 2024
Researcher: Ngô Thiên An (ancorn_)
Event Manager for WooCommerce <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mep_get_option' function
4.4
CVE-2023-28422
Mar 20, 2023
Researcher: Yuki Haruma
Event Manager for WooCommerce <= 3.7.7 - Cross-Site Request Forgery leading to Uninstall Form Submission
4.3
CVE-2022-47164
Mar 16, 2023
Researcher: István Márton
Title Status CVE ID CVSS Researchers Date
Event Booking Manager for WooCommerce <= 5.3.3 - Missing Authorization Patched CVE-2026-45441 5.3 dodoh4t May 26, 2026
Event Booking Manager for WooCommerce <= 5.1.4 - Reflected Cross-Site Scripting Patched CVE-2026-25361 6.1 johska March 20, 2026
WpEvently <= 5.1.1 - Unauthenticated PHP Object Injection Patched CVE-2026-23549 8.1 Phat RiO February 18, 2026
WpEvently < 5.1.9 - Unauthenticated Information Exposure Patched CVE-2026-32354 4.3 Bao - BlueRock February 14, 2026
WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2026-24954 7.5 Phat RiO December 25, 2025
WpEvently <= 5.1.1 - Cross-Site Request Forgery Patched CVE-2026-24942 4.3 daroo December 6, 2025
WpEvently <= 5.0.4 - Missing Authorization Patched CVE-2025-66083 5.3 Legion Hunter December 4, 2025
WpEvently <= 5.0.4 - Missing Authorization Patched CVE-2025-66082 5.3 Que Thanh Tuan - Blue Rock November 30, 2025
WpEvently <= 4.4.8 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2025-54742 7.5 Ananda Dhakal August 27, 2025
WpEvently <= 4.4.6 - Missing Authorization Patched CVE-2025-54705 4.3 Denver Jackson July 30, 2025
WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-5568 6.4 siavashvafshar June 6, 2025
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2025-32145 8.8 LVT-tholv2k April 8, 2025
WpEvently <= 4.2.9 - Missing Authorization Patched CVE-2025-30887 5.3 LVT-tholv2k March 27, 2025
WpEvently <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-30895 8.8 LVT-tholv2k March 27, 2025
Event Manager for WooCommerce <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-49703 6.4 João Pedro Soares de Alcântara October 21, 2024
Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2024-43138 9.9 João G. Barbosa (4rCanJ0x!) August 7, 2024
Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout Patched CVE-2024-32110 4.3 Dhabaleshwar Das April 11, 2024
Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently <= 4.1.1 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save Patched CVE-2024-24796 8.8 Ngô Thiên An (ancorn_) January 31, 2024
Event Manager for WooCommerce <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mep_get_option' function Patched CVE-2023-28422 4.4 Yuki Haruma March 20, 2023
Event Manager for WooCommerce <= 3.7.7 - Cross-Site Request Forgery leading to Uninstall Form Submission Patched CVE-2022-47164 4.3 István Márton March 16, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation