Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

Information

Software Type Plugin
Software Slug wp-event-solution (view on wordpress.org)
Software Status Active
Software Author arraytics
Software Website themewinter.com
Software Downloads 917,343
Software Active Installs 10,000
Software Record Last Updated October 16, 2026

Showing 1-20 of 57 Vulnerabilities

Submit a Vulnerability
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization
5.3
CVE-2026-109898
Oct 13, 2026
Researcher: Charles Vosburgh
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization
5.3
CVE-2026-97300
Oct 5, 2026
Researcher: Ratchanon Chamnankit
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization
5.3
CVE-2026-103684
Oct 5, 2026
Researcher: Peter Tang
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Unauthenticated Information Exposure
5.3
CVE-2026-105073
Oct 5, 2026
Researcher: Peter Tang
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter
7.5
CVE-2026-75983
Sep 14, 2026
Researcher: Wordfence PRISM
Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter
6.4
CVE-2026-15402
Sep 14, 2026
Researcher: Wordfence PRISM
Eventin <= 4.1.23 - Unauthenticated Payment Bypass
5.3
CVE-2026-84906
Sep 14, 2026
Researcher: cyberkareem
Eventin <= 4.1.23 - Missing Authorization
4.3
CVE-2026-84905
Sep 14, 2026
Researcher: Karthik Ramakrishnan
Eventin <= 4.1.23 - Missing Authorization
5.3
CVE-2026-77702
Sep 14, 2026
Researcher: Nir Yehoshua
Eventin <= 4.1.23 - Missing Authorization
5.3
CVE-2026-84907
Sep 14, 2026
Researcher: Karthik Ramakrishnan
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption
4.3
CVE-2026-15398
Sep 8, 2026
Researcher: Wordfence PRISM
Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
5.4
CVE-2026-11821
Sep 8, 2026
Researcher: Sushi Com Abacate
Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter
7.5
CVE-2026-15667
Sep 8, 2026
Researcher: Wordfence PRISM
Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter
7.5
CVE-2026-15406
Sep 8, 2026
Researcher: Wordfence PRISM
Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter
5.3
CVE-2026-12956
Sep 8, 2026
Researcher: Wordfence PRISM
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.21 - Authenticated (Contributor+) Path Traversal
6.5
CVE-2026-84898
Sep 5, 2026
Researcher: Sai Praneeth Koti
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Missing Authorization
4.3
CVE-2026-84901
Sep 5, 2026
Researcher: Sai Praneeth Koti
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.22 - Missing Authorization
5.3
CVE-2026-82223
Sep 1, 2026
Researcher: 20kilograma
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Unauthenticated Information Exposure
5.3
CVE-2026-13172
Aug 26, 2026
Researcher: Meher Sudhakar Abbireddi
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.19 - Unauthenticated Order Completion
5.3
CVE-2026-77694
Aug 24, 2026
Researcher: Nir Yehoshua
Title Status CVE ID CVSS Researchers Date
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization Patched CVE-2026-109898 5.3 Charles Vosburgh October 13, 2026
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization Patched CVE-2026-97300 5.3 Ratchanon Chamnankit October 5, 2026
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization Patched CVE-2026-103684 5.3 Peter Tang October 5, 2026
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Unauthenticated Information Exposure Patched CVE-2026-105073 5.3 Peter Tang October 5, 2026
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter Patched CVE-2026-75983 7.5 Wordfence PRISM September 14, 2026
Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter Patched CVE-2026-15402 6.4 Wordfence PRISM September 14, 2026
Eventin <= 4.1.23 - Unauthenticated Payment Bypass Patched CVE-2026-84906 5.3 cyberkareem September 14, 2026
Eventin <= 4.1.23 - Missing Authorization Patched CVE-2026-84905 4.3 Karthik Ramakrishnan September 14, 2026
Eventin <= 4.1.23 - Missing Authorization Patched CVE-2026-77702 5.3 Nir Yehoshua September 14, 2026
Eventin <= 4.1.23 - Missing Authorization Patched CVE-2026-84907 5.3 Karthik Ramakrishnan September 14, 2026
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption Patched CVE-2026-15398 4.3 Wordfence PRISM September 8, 2026
Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint Patched CVE-2026-11821 5.4 Sushi Com Abacate September 8, 2026
Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter Patched CVE-2026-15667 7.5 Wordfence PRISM September 8, 2026
Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter Patched CVE-2026-15406 7.5 Wordfence PRISM September 8, 2026
Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter Patched CVE-2026-12956 5.3 Wordfence PRISM September 8, 2026
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.21 - Authenticated (Contributor+) Path Traversal Patched CVE-2026-84898 6.5 Sai Praneeth Koti September 5, 2026
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Missing Authorization Patched CVE-2026-84901 4.3 Sai Praneeth Koti September 5, 2026
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.22 - Missing Authorization Patched CVE-2026-82223 5.3 20kilograma September 1, 2026
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Unauthenticated Information Exposure Patched CVE-2026-13172 5.3 Meher Sudhakar Abbireddi August 26, 2026
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.19 - Unauthenticated Order Completion Patched CVE-2026-77694 5.3 Nir Yehoshua August 24, 2026

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation