event espresso
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 3, 2024 to present
4
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
4.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
38/100
low
Severity Distribution
Critical
0High
0Medium
3Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
CSRF
1
Most Affected Products
1. Event Espresso Event Espresso 4 Decaf3
2. wordpress/event-espresso-decaf1
3. Event Espresso Event Espresso Decaf1
4. Eventespresso Event Espresso Wordpress1
5. WordPress Event Espresso 4 Decaf1
Recent Vulnerabilities
See more →CVE-2025-68007
CVSS 6.5medium
WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability
1/22/2026🔧 No Patch
CVE-2024-56251
CVSS 4.3medium
WordPress Event Espresso plugin <= 5.0.28.decaf - Cross Site Request Forgery (CSRF) vulnerability
1/2/2025
CVE-2024-6883
CVSS 4.3EPSS 0%medium
Event Espresso 4 Decaf – Event Registration Event Ticketing <= 4.10.46.decaf- Authenticated (Subscriber+) Missing Authorization to Limited Plugin Settings Modification
8/21/2024🔧 No Patch
CVE-2023-27437
CVSS 3.7low
WordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerability
6/3/2024
Monitor event espresso in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.