Wp Event Manager

6 CVEs across 3 Wp Event Manager products. Browse Wp Event Manager vulnerabilities, severities, and proof-of-concept exploits.

Wp Event Manager products with known CVEs

ProductCVEs
Wp Event Manager2
Wp Event Manager – Events Calendar, Registrations, Sell Tickets With Woocommerce2
Wp User Profile Avatar2
Wp Event Manager CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-49980Medium4.32025-06-20Missing Authorization vulnerability in WP Event Manager WP User Profile Avatar wp-user-profile-avatar allows Exploiting Incorrectly Configured Access Control S…
CVE-2025-48125High8.12025-06-09Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Event Manager WP Event Manager wp-e…
CVE-2025-32225Medium5.32025-04-04Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Leve…
CVE-2023-52118Medium6.52024-02-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager WP User Profile Avatar allows Stored XSS…
CVE-2023-49181Medium5.92023-12-15Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager WP Event Manager – Events Calendar, Regi…
CVE-2023-47697High7.12023-11-13Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce…