| CVE-2026-84906 |
The Eventin WordPress plugin before 4.1.24 does not verify that a completed payment corresponds to the order it is…
|
5.3
Moyenne
|
16 sept. 2026 |
| CVE-2026-84905 |
The Eventin WordPress plugin before 4.1.24 does not verify a user's capability to create accounts when adding a…
|
2.7
Faible
|
16 sept. 2026 |
| CVE-2026-84907 |
The Eventin WordPress plugin before 4.1.24 does not properly authorise order finalisation when its offline (local)…
|
3.7
Faible
|
16 sept. 2026 |
| CVE-2026-77702 |
The Eventin WordPress plugin before 4.1.24 does not prevent the token issued to a guest at checkout from being used…
|
5.3
Moyenne
|
16 sept. 2026 |
| CVE-2026-84901 |
The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management…
|
4.9
Moyenne
|
5 sept. 2026 |
| CVE-2026-84898 |
The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to…
|
6.6
Moyenne
|
5 sept. 2026 |
| CVE-2026-77694 |
The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed…
|
5.3
Moyenne
|
26 août 2026 |
| CVE-2026-13172 |
The Eventin WordPress plugin before 4.1.22 does not restrict access to non-published content by status or ownership…
|
5.3
Moyenne
|
26 août 2026 |
| CVE-2026-13176 |
The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify…
|
2.7
Faible
|
21 août 2026 |
| CVE-2026-13169 |
The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be…
|
8.1
Élevée
|
19 août 2026 |
| CVE-2026-13173 |
The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before…
|
2.7
Faible
|
19 août 2026 |
| CVE-2026-13174 |
The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts,…
|
7.2
Élevée
|
19 août 2026 |
| CVE-2026-13175 |
The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or…
|
6.5
Moyenne
|
19 août 2026 |
| CVE-2026-13171 |
The Eventin WordPress plugin before 4.1.20 does not perform an authorization check on its waiting-list registration…
|
8.2
Élevée
|
12 août 2026 |
| CVE-2026-13177 |
The Eventin WordPress plugin before 4.1.20 does not properly restrict access to individual order records, allowing…
|
4.3
Moyenne
|
12 août 2026 |
| CVE-2026-13168 |
The Eventin WordPress plugin before 4.1.20 does not properly restrict access to stored customer records, allowing users…
|
6.5
Moyenne
|
12 août 2026 |
| CVE-2026-13170 |
The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to…
|
7.2
Élevée
|
10 août 2026 |
| CVE-2026-13178 |
The Eventin WordPress plugin before 4.1.16 does not properly authorize order creation and accepts an…
|
7.5
Élevée
|
30 juil. 2026 |