Product by Arraytics

    Eventin – Event Calendar, Tickets, Registration, Booking & Woocommerce

    7 known vulnerabilities in Eventin – Event Calendar, Tickets, Registration, Booking & Woocommerce (Arraytics), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Eventin – Event Calendar, Tickets, Registration, Booking & Woocommerce (Arraytics)
    HighCVE-2026-15406

    Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter

    		7.5
    HighCVE-2026-15667

    Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter

    		7.5
    HighCVE-2026-75983

    Improper Privilege Management (CVE-2026-75983)

    		7.5
    MediumCVE-2026-15402

    Cross-site Scripting (CVE-2026-15402)

    		6.4
    MediumCVE-2026-12956

    Missing Authorization (CVE-2026-12956)

    		5.3
    MediumCVE-2026-11821

    Missing Authorization (CVE-2026-11821)

    		5.4
    MediumCVE-2026-15398

    Missing Authorization (CVE-2026-15398)

    		4.3

    All products by Arraytics