Plugin icon

Event Espresso – Event Registration & Ticketing Sales

event-espresso-decaf

Vulnerabilities:

5

Last Updated:

July 17, 2026

Active Installs:

600

Published
Title
Fixed in
CVSS
Published
2026-01-15
Title
Event Espresso 4 Decaf < 5.0.53.decafdecaf - Missing Authorization to Unauthenticated Settings Change
Fixed in
Fixed in 5.0.53.decaf
CVSS
6.5 (medium)
Published
2024-12-30
Title
Event Espresso 4 Decaf < 5.0.31.decafdecaf - Cross-Site Request Forgery
Fixed in
Fixed in 5.0.31.decaf
CVSS
4.3 (medium)
Published
2024-08-20
Title
Event Espresso 4 Decaf – Event Registration Event Ticketing < 5.0.22.decafdecaf- Authenticated (Subscriber+) Missing Authorization to Limited Plugin Settings Modification
Fixed in
Fixed in 5.0.22.decaf
CVSS
4.3 (medium)
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Fixed in
Fixed in 4.10.14
CVSS
5.4 (medium)
Published
2021-08-16
Title
Event Espresso 4 Decaf < 4.10.12 - Cross-Site Request Forgery
Fixed in
Fixed in 4.10.12
CVSS
4.3 (medium)