Plugin icon

WP Events Manager

wp-events-manager

Vulnerabilities:

4

Last Updated:

August 22, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-08-03
Title
WP Events Manager < 2.2.5 - Unauthenticated Payment Bypass and Booking Status Update via IDOR
Fixed in
Fixed in 2.2.5
CVSS
5.3 (medium)
Published
2026-08-03
Title
WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter
Fixed in
Fixed in 2.2.5
CVSS
4.3 (medium)
Published
2025-09-22
Title
WP Events Manager < 2.2.2 - Missing Authorization
Fixed in
Fixed in 2.2.2
CVSS
6.5 (medium)
Published
2024-08-30
Title
WP Events Manager < 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection
Fixed in
Fixed in 2.2.0
CVSS
8.8 (high)