WP Event Manager
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Event Manager | 2 | – | Jun 9, 2025 |
| WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce | 2 | – | Dec 15, 2023 |
| WP User Profile Avatar | 2 | – | Jun 20, 2025 |
Exploited and recent CVEs
- CVE-2025-49980 WordPress WP User Profile Avatar plugin <= 1.0.6 - Broken Access Control Vulnerability 0.3%
- CVE-2025-48125 WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability 0.7%
- CVE-2025-32225 WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability 0.5%
- CVE-2023-52118 WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) 0.3%
- CVE-2023-49181 WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-47697 WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS) 0.4%