Event Espresso
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Event Espresso 4 Decaf | 3 | – | Jan 22, 2026 |
Exploited and recent CVEs
- CVE-2025-68007 WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability 0.4%
- CVE-2024-56251 WordPress Event Espresso plugin <= 5.0.28.decaf - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2023-27437 WordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerability 0.3%