WP Event Manager vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20241
3. 20253

Newest CVEs

• CVE-2025-49980

  WordPress WP User Profile Avatar plugin <= 1.0.6 - Broken Access Control Vulnerability

  WP Event Manager · WP User Profile Avatar

  Medium4.3
• CVE-2025-48125

  WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability

  WP Event Manager · WP Event Manager

  High8.1
• CVE-2025-32225

  WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability

  WP Event Manager · WP Event Manager

  Medium5.3
• CVE-2023-52118

  WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

  WP Event Manager · WP User Profile Avatar

  Medium6.5
• CVE-2023-49181

  WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)

  WP Event Manager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

  Medium5.9
• CVE-2023-47697

  WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)

  WP Event Manager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

  High7.1