WordPress Vulnerability Scanner WPSec
Vulnerabilities / Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce vulnerabilities

Advisories WPSec published for Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce. Other sources may list more. Its attack surface: Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-17 WPSEC-2026-1154 Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.26 - Authenticated (Custom+) Missing Authorization to Order Status Manipulation and Attendee Reassignment Low 2.7 4.1.27
2026-10-17 WPSEC-2026-1153 Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.26 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Post Featured Image Modification Medium 4.3 4.1.27
2026-10-17 WPSEC-2026-1152 Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.26 - Authenticated (Contributor+) Sensitive Information Exposure via Event Organizer/Speaker Assignment and Speaker/Organizer Events Shortcodes Medium 4.3 4.1.27
2026-10-17 WPSEC-2026-1151 Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.26 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure via Speaker REST API Medium 4.3 4.1.27
2026-10-17 WPSEC-2026-1150 Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.26 - Unauthenticated Payment Bypass via WooCommerce Order Linking Medium 5.3 4.1.27
2026-10-06 WPSEC-2026-0449 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Unauthenticated Missing Authorization to Booking Status Update Medium 5.3 4.1.26
2026-10-06 WPSEC-2026-0448 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Unauthenticated Sensitive Information Exposure via Event Structured Data Low 3.7 4.1.26
2026-10-06 WPSEC-2026-0447 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Unauthenticated Sensitive Information Exposure via Event REST API Medium 5.3 4.1.26
2026-10-06 WPSEC-2026-0446 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Unauthenticated Payment Bypass via Mismatched Order Attendees Medium 5.3 4.1.26

License: CC BY 4.0