Wwpeventmanager

Products

Exploited and recent CVEs

• CVE-2025-2799 Medium 4.4 WP Event Manager <= 3.1.49 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.2%
• CVE-2025-2800 High 7.2 WP Event Manager <= 3.1.50 - Unauthenticated Stored Cross-Site Scripting via 'organizer_name' 0.3%
• CVE-2024-10789 Medium 4.3 WP User Profile Avatar <= 1.0.5 - Cross-Site Request Forgery to Settings Update 0.2%
• CVE-2024-2691 Medium 6.4 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode 0.3%
• CVE-2024-0976 Medium 6.1 WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin 0.6%
• CVE-2023-4423 Medium 4.4 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting 0.6%