Unknown Events Manager

• CVE-2026-93662 Medium 4.3 Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter 0.2%
• CVE-2026-93661 Low 2.7 Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR 0.2%
• CVE-2026-18366 Critical 9.8 Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator 0.5%
• CVE-2026-18057 High 8.1 Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection 0.4%
• CVE-2026-18050 High 7.5 Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads 0.4%
• CVE-2026-12987 High 7.5 Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration 0.5%
• CVE-2020-35037 Unrated Events Manager < 5.9.8 - Cross-Site Scripting (XSS) 0.9%
• CVE-2020-35012 Unrated Events Manager < 5.9.8 - Admin+ SQL Injection 1.5%