Unknown Eventin

• CVE-2026-84906 Medium 5.3 Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction Replay 0.2%
• CVE-2026-84907 Low 3.7 Eventin < 4.1.24 - Unauthenticated Order and Attendee Status Reset via Payment REST Endpoint 0.2%
• CVE-2026-84905 Low 2.7 Eventin < 4.1.24 - Contributor+ User Creation via Speaker Creation 0.3%
• CVE-2026-77702 Medium 5.3 Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_token 0.3%
• CVE-2026-84901 Medium 4.9 Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization 0.3%
• CVE-2026-84898 Medium 6.6 Eventin < 4.1.21 - Contributor+ LFI via Event Layout Meta 0.4%
• CVE-2026-77694 Medium 5.3 Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token 0.3%
• CVE-2026-13172 Medium 5.3 Eventin < 4.1.22 - Unauthenticated Unpublished Content Disclosure 0.3%
• CVE-2026-13176 Low 2.7 Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery 0.3%
• CVE-2026-13175 Medium 6.5 Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR 0.4%
• CVE-2026-13174 High 7.2 Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR 0.5%
• CVE-2026-13173 Low 2.7 Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation 0.3%
• CVE-2026-13169 High 8.1 Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR 0.4%
• CVE-2026-13177 Medium 4.3 Eventin < 4.1.20 - Contributor+ Order Information Disclosure via IDOR 0.3%
• CVE-2026-13171 High 8.2 Eventin < 4.1.20 - Unauthenticated Account Creation via Waiting List Endpoint 0.3%
• CVE-2026-13168 Medium 6.5 Eventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST API 0.4%
• CVE-2026-13170 High 7.2 Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting 0.6%
• CVE-2026-13178 High 7.5 Eventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status Manipulation 0.4%