WP Event Manager

Products

Exploited and recent CVEs

  • CVE-2025-49980 Medium 4.3 WordPress WP User Profile Avatar plugin <= 1.0.6 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-48125 High 8.1 WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability 0.7%
  • CVE-2025-32225 Medium 5.3 WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability 0.5%
  • CVE-2023-52118 Medium 6.5 WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-49181 Medium 5.9 WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-47697 High 7.1 WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS) 0.4%