Event Espresso

Products

ProductCVEsExploitedLatest
Event Espresso 4 Decaf3–Jan 22, 2026

Exploited and recent CVEs

  • CVE-2025-68007 Medium 6.5 WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability 0.4%
  • CVE-2024-56251 Medium 4.3 WordPress Event Espresso plugin <= 5.0.28.decaf - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-27437 Low 3.7 WordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerability 0.3%