wpeventmanager vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 20253

Newest CVEs

• CVE-2025-2799

  WP Event Manager <= 3.1.49 - Authenticated (Administrator+) Stored Cross-Site Scripting

  wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

  Medium4.4
• CVE-2025-2800

  WP Event Manager <= 3.1.50 - Unauthenticated Stored Cross-Site Scripting via 'organizer_name'

  wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

  High7.2
• CVE-2024-10789

  WP User Profile Avatar <= 1.0.5 - Cross-Site Request Forgery to Settings Update

  wpeventmanager · WP User Profile Avatar

  Medium4.3
• CVE-2024-2691

  WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode

  wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

  Medium6.4
• CVE-2024-0976

  WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin

  wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

  Medium6.1
• CVE-2023-4423

  WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting

  wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

  Medium4.4