Product by Arraytics
Arraytics Eventin
16 known vulnerabilities in Arraytics Eventin (Arraytics), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-47539 | WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability | 9.8 | |
| Critical | CVE-2025-47445 | WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability | 7.5 | |
| High | CVE-2024-7149 | Themewinter Eventin: Path Traversal | 8.8 | |
| High | CVE-2025-1770 | Themewinter Eventin: Path Traversal | 8.8 | |
| High | CVE-2025-68047 | WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability | 8.8 | |
| High | CVE-2025-4796 | Themewinter Eventin: Authorization Bypass Through User-Controlled Key | 8.8 | |
| High | CVE-2025-39584 | WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability | 7.5 | |
| High | CVE-2025-26964 | WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability | 7.5 | |
| High | CVE-2025-3419 | Themewinter Eventin: External Control of File Name or Path | 7.5 | |
| High | CVE-2025-49869 | WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection Vulnerability | 8.8 | |
| High | CVE-2024-56213 | WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability | 6.5 | |
| High | CVE-2023-49756 | WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability | 5.4 | |
| High | CVE-2025-49321 | WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability | 7.1 | |
| Medium | CVE-2024-1122 | Themewinter Eventin: Missing Authorization | 5.3 | |
| Medium | CVE-2025-1766 | Themewinter Eventin: Missing Authorization | 5.3 | |
| Medium | CVE-2024-6033 | Themewinter Eventin: Missing Authorization | 4.3 |