Arraytics Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce

• CVE-2026-75983 High 7.5 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter 0.7%
• CVE-2026-15402 Medium 6.4 Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter 0.4%
• CVE-2026-11821 Medium 5.4 Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint 0.3%
• CVE-2026-15667 High 7.5 Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter 1.0%
• CVE-2026-15406 High 7.5 Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter 1.1%
• CVE-2026-12956 Medium 5.3 Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter 0.4%