Unknown Eventin vulnerabilities

Newest CVEs

• CVE-2026-84906

  Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction Replay

  Unknown · Eventin

  Medium5.3
• CVE-2026-84907

  Eventin < 4.1.24 - Unauthenticated Order and Attendee Status Reset via Payment REST Endpoint

  Unknown · Eventin

  Low3.7
• CVE-2026-84905

  Eventin < 4.1.24 - Contributor+ User Creation via Speaker Creation

  Unknown · Eventin

  Low2.7
• CVE-2026-77702

  Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_token

  Unknown · Eventin

  Medium5.3
• CVE-2026-84901

  Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization

  Unknown · Eventin

  Medium4.9
• CVE-2026-84898

  Eventin < 4.1.21 - Contributor+ LFI via Event Layout Meta

  Unknown · Eventin

  Medium6.6
• CVE-2026-77694

  Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token

  Unknown · Eventin

  Medium5.3
• CVE-2026-13172

  Eventin < 4.1.22 - Unauthenticated Unpublished Content Disclosure

  Unknown · Eventin

  Medium5.3
• CVE-2026-13176

  Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery

  Unknown · Eventin

  Low2.7
• CVE-2026-13175

  Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR

  Unknown · Eventin

  Medium6.5