Recently modified vulnerabilities for "themewinter eventin"

Where

Sort:

Themewinter EventinWordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability

Risk 56

Severity

8.8

EPSS

0.12%

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File Inclusion.This issue affects Eventin: from n/a through <= 4.0.20.

Remedy

Update the WordPress Eventin wordpress plugin to the latest available version (at least 4.0.21).

First published (updated )

CVE-2025-26964

Themewinter EventinWordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability

Risk 61

Severity

9.8

EPSS

0.06%

Path Traversal

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.26.

Remedy

Update the WordPress Eventin plugin to the latest available version (at least 4.0.27).

First published (updated )

CVE-2025-47445

Themewinter EventinWordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability

Risk 79

Severity

8.8

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventin: from n/a through <= 3.3.52.

Remedy

No patched version is available.

First published (updated )

CVE-2023-49756

Themewinter EventinWordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

Risk 42

Severity

9.8

EPSS

6.01%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through <= 4.0.26.

Remedy

Update the WordPress Eventin plugin to the latest available version (at least 4.0.27).

First published (updated )

CVE-2025-47539

Themewinter EventinWordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability

Risk 30

Severity

7.5

EPSS

0.13%

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Remedy

Update the WordPress Eventin plugin to the latest available version (at least 4.0.26).

First published (updated )

CVE-2025-39584

Themewinter EventinWordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability

Risk 79

Severity

8.8

Path Traversal

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.7.

Remedy

Update the WordPress Eventin wordpress plugin to the latest available version (at least 4.0.9).

First published (updated )

CVE-2024-56213

Themewinter EventinWordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

Risk 40

Severity

5.9

XSS

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from n/a through 4.0.5.

Remedy

Update to 4.0.6 or a higher version.

First published (updated )

CVE-2024-39648

Themewinter EventinWordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability

Risk 46

Severity

6.5

XSS

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from n/a through 3.3.57.

Remedy

Update to 4.0.0 or a higher version.

First published (updated )

CVE-2024-37507

Trending

Themewinter EventinWordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability

Remedy

Themewinter EventinWordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability

Remedy

Themewinter EventinWordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability

Remedy

Themewinter EventinWordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

Remedy

Themewinter EventinWordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability

Remedy

Themewinter EventinWordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability

Remedy

Themewinter EventinWordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

Remedy

Themewinter EventinWordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability

Remedy

Company

Resources

Contact