Product by Arraytics

    Eventin – Event Calendar, Event Registration, Tickets & Booking (ai Powered)

    12 known vulnerabilities in Eventin – Event Calendar, Event Registration, Tickets & Booking (ai Powered) (Arraytics), 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Eventin – Event Calendar, Event Registration, Tickets & Booking (ai Powered) (Arraytics)
    HighCVE-2024-7149

    Themewinter Eventin: Path Traversal

    also in 1 other product

    		8.8
    HighCVE-2025-1770

    Themewinter Eventin: Path Traversal

    also in 1 other product

    		8.8
    HighCVE-2025-4796

    Themewinter Eventin: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		8.8
    HighCVE-2025-3419

    Themewinter Eventin: External Control of File Name or Path

    also in 1 other product

    		7.5
    MediumCVE-2026-12924

    Cross-site Scripting (CVE-2026-12924)

    		6.4
    HighCVE-2025-14657

    Missing Authorization (CVE-2025-14657)

    		7.2
    MediumCVE-2026-13039

    Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API

    		5.3
    HighCVE-2025-7813

    Server-Side Request Forgery (SSRF) (CVE-2025-7813)

    		7.2
    MediumCVE-2024-1122

    Themewinter Eventin: Missing Authorization

    also in 1 other product

    		5.3
    MediumCVE-2025-1766

    Themewinter Eventin: Missing Authorization

    also in 1 other product

    		5.3
    MediumCVE-2026-4109

    Missing Authorization (CVE-2026-4109)

    		4.3
    MediumCVE-2024-6033

    Themewinter Eventin: Missing Authorization

    also in 1 other product

    		4.3

    All products by Arraytics