Plugin icon

Eventer

eventer
Plugin closed

Vulnerabilities:

12

Last Updated:

July 22, 2018

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-07-07
Title
Eventer < 4.4.4 - Unauthenticated SQL Injection via 'code' Parameter
Fixed in
Fixed in 4.4.4
CVSS
7.5 (high)
Published
2026-07-07
Title
Eventer <= 4.4.2 - Unauthenticated Privilege Escalation via Insecure Password Reset
Fixed in
No known fix
CVSS
8.1 (high)
Published
2025-08-04
Title
Eventer < 3.11.2.2 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 3.11.2.2
CVSS
6.5 (medium)
Published
2025-05-16
Title
Eventer <= 3.9.6 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-05-16
Title
Eventer <= 3.9.6 - Unauthenticated SQL Injection
Fixed in
No known fix
CVSS
7.5 (high)
Published
2025-03-06
Title
Eventer < 3.9.9.3 - Subscriber+ SQLi
Fixed in
Fixed in 3.9.9.3
CVSS
7.7 (high)
Published
2025-02-14
Title
Eventer < 3.9.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.9.9
CVSS
6.1 (medium)
Published
2025-02-03
Title
Eventer < 3.9.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.9.9.5
CVSS
6.4 (medium)
Published
2025-02-03
Title
Eventer < 3.9.9.5.1 - Missing Authorization to Unauthenticated Event Ticket Download
Fixed in
Fixed in 3.9.9.5.1
CVSS
5.3 (medium)
Published
2025-02-03
Title
Eventer < 3.9.9.1 - Missing Authorization to Authenticated (Subscriber+) Bookings Export
Fixed in
Fixed in 3.9.9.1
CVSS
4.3 (medium)
Published
2025-01-27
Title
Eventer < 3.9.9 - Unauthenticated SQL Injection via eventer_get_attendees
Fixed in
Fixed in 3.9.9
CVSS
7.5 (high)
Published
2025-01-16
Title
Eventer < 3.9.8 - Authenticated (Subscriber+) Arbitrary File Read
Fixed in
Fixed in 3.9.8
CVSS
6.5 (medium)