Vulnerabilities / Event Manager and Tickets Selling Plugin for WooCommerce
Event Manager and Tickets Selling Plugin for WooCommerce vulnerabilities
Advisories WPSec published for Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar. Other sources may list more. Its attack surface: Event Manager and Tickets Selling Plugin for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1288 | Event Manager and Tickets Selling Plugin for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation via Shop Manager Capability Elevation | High 7.2 | 5.7.9 |
| 2026-10-06 | WPSEC-2026-0471 | Event Booking Manager for WooCommerce <= 5.7.5 - Unauthenticated Missing Authorization to Paid Event RSVP Registration and Online Event Details Disclosure | Medium 4.8 | 5.7.6 |
License: CC BY 4.0