Plugin icon

Event Monster – Event Manager, Event Booking, Event Ticket & Registration

event-monster

Vulnerabilities:

8

Last Updated:

July 24, 2026

Active Installs:

600

Published
Title
Fixed in
CVSS
Published
2026-06-05
Title
Event Monster < 2.2.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX Action
Fixed in
Fixed in 2.2.0
CVSS
5.3 (medium)
Published
2025-01-13
Title
Event monster < 1.4.4 - Information Exposure Via Visitors List Export
Fixed in
Fixed in 1.4.4
CVSS
5.3 (medium)
Published
2024-06-19
Title
Event Monster < 1.4.4 - Unauthenticated Information Exposure
Fixed in
Fixed in 1.4.4
CVSS
5.3 (medium)
Published
2024-04-29
Title
Event Monster < 1.4.0 - Contributor+ PHP Object Injection via Custom Meta
Fixed in
Fixed in 1.4.0
CVSS
6.6 (medium)
Published
2023-12-19
Title
Event Monster < 2.0.0 - Admin+ Stored XSS
Fixed in
Fixed in 2.0.0
CVSS
3.5 (low)
Published
2022-10-31
Title
Event Monster < 1.2.0 - Visitors Deletion via CSRF
Fixed in
Fixed in 1.2.0
CVSS
4.3 (medium)
Published
2022-10-31
Title
Event Monster < 1.2.1 - Admin+ SQLi
Fixed in
Fixed in 1.2.1
CVSS
6.8 (medium)
Published
2019-05-27
Title
Event Management Tickets Booking By Event Monster <= 1.0.5 - Stored XSS
Fixed in
Fixed in 1.0.6
CVSS
n/a