| CVE-2026-84906 |
The Eventin WordPress plugin before 4.1.24 does not verify that a completed payment corresponds to the order it is…
|
5.3
Medium
|
Sep 16, 2026 |
| CVE-2026-84905 |
The Eventin WordPress plugin before 4.1.24 does not verify a user's capability to create accounts when adding a…
|
2.7
Low
|
Sep 16, 2026 |
| CVE-2026-84907 |
The Eventin WordPress plugin before 4.1.24 does not properly authorise order finalisation when its offline (local)…
|
3.7
Low
|
Sep 16, 2026 |
| CVE-2026-77702 |
The Eventin WordPress plugin before 4.1.24 does not prevent the token issued to a guest at checkout from being used…
|
5.3
Medium
|
Sep 16, 2026 |
| CVE-2026-84901 |
The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management…
|
4.9
Medium
|
Sep 5, 2026 |
| CVE-2026-84898 |
The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to…
|
6.6
Medium
|
Sep 5, 2026 |
| CVE-2026-77694 |
The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed…
|
5.3
Medium
|
Aug 26, 2026 |
| CVE-2026-13172 |
The Eventin WordPress plugin before 4.1.22 does not restrict access to non-published content by status or ownership…
|
5.3
Medium
|
Aug 26, 2026 |
| CVE-2026-13176 |
The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify…
|
2.7
Low
|
Aug 21, 2026 |
| CVE-2026-13169 |
The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be…
|
8.1
High
|
Aug 19, 2026 |
| CVE-2026-13173 |
The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before…
|
2.7
Low
|
Aug 19, 2026 |
| CVE-2026-13174 |
The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts,…
|
7.2
High
|
Aug 19, 2026 |
| CVE-2026-13175 |
The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or…
|
6.5
Medium
|
Aug 19, 2026 |
| CVE-2026-13171 |
The Eventin WordPress plugin before 4.1.20 does not perform an authorization check on its waiting-list registration…
|
8.2
High
|
Aug 12, 2026 |
| CVE-2026-13177 |
The Eventin WordPress plugin before 4.1.20 does not properly restrict access to individual order records, allowing…
|
4.3
Medium
|
Aug 12, 2026 |
| CVE-2026-13168 |
The Eventin WordPress plugin before 4.1.20 does not properly restrict access to stored customer records, allowing users…
|
6.5
Medium
|
Aug 12, 2026 |
| CVE-2026-13170 |
The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to…
|
7.2
High
|
Aug 10, 2026 |
| CVE-2026-13178 |
The Eventin WordPress plugin before 4.1.16 does not properly authorize order creation and accepts an…
|
7.5
High
|
Jul 30, 2026 |