EventON vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20251
3. 20263

Newest CVEs

• CVE-2026-93300

  EventON - Subscriber <= 1.4.5 - Unauthenticated SQL Injection via 'email' Parameter

  EventOn · EventON - Subscriber

  High7.5
• CVE-2026-10033

  EventON Action User <= 2.5.14 - Missing Authorization to Unauthenticated Privilege Escalation via evoau_save_capability AJAX Action

  EventON · EventON Action User

  High7.3
• CVE-2026-9711

  EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter

  EventON · EventON (Pro) - WordPress Virtual Event Calendar Plugin

  Critical9.8
• CVE-2025-3527

  EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

  EventON · EventON (Pro) - WordPress Virtual Event Calendar Plugin

  Medium6.4
• CVE-2023-6243

  EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email

  EventON · EventON (Pro) - WordPress Virtual Event Calendar Plugin

  Medium4.3
• CVE-2023-6242

  EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta

  ashanjay · EventON – Events Calendar

  Medium6.5
• CVE-2023-6244

  EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings

  ashanjay · EventON – Events Calendar

  Medium6.5
• CVE-2023-6158

  EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta

  ashanjay · EventON – Events Calendar

  Medium6.5