Unknown Events Manager vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20266

Newest CVEs

• CVE-2026-93662

  Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter

  Unknown · Events Manager

  Medium4.3
• CVE-2026-93661

  Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR

  Unknown · Events Manager

  Low2.7
• CVE-2026-18366

  Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator

  Unknown · Events Manager

  Critical9.8
• CVE-2026-18057

  Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection

  Unknown · Events Manager

  High8.1
• CVE-2026-18050

  Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads

  Unknown · Events Manager

  High7.5
• CVE-2026-12987

  Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration

  Unknown · Events Manager

  High7.5
• CVE-2020-35037

  Events Manager < 5.9.8 - Cross-Site Scripting (XSS)

  Unknown · Events Manager

  Medium6.1
• CVE-2020-35012

  Events Manager < 5.9.8 - Admin+ SQL Injection

  Unknown · Events Manager

  High7.2