Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.8 - Missing Authorization
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Minimum safe version
4.1.9
Update to 4.1.9 or later to address 22 fixable vulnerabilities
Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery
Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure
CVE-2025-68047
CVE-2025-14657
CVE-2025-49869
Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
CVE-2025-49321
CVE-2025-47539
CVE-2025-47445
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read
CVE-2025-39584
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update
CVE-2025-26964
CVE-2024-56213
CVE-2024-7149
CVE-2024-39648
CVE-2024-6033
CVE-2024-37507
CVE-2024-1122
CVE-2023-49756