{"id":"CVE-2025-52731","aliases":["EUVD-2025-24788","GHSA-f3x4-877m-pv24"],"status":"published","title":"WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin \u003c= 4.0.24 - Arbitrary Content Deletion Vulnerability","description":"Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through \u003c= 4.0.24.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00399,"percentile":0.34615,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2025-08-14T10:34:01Z","modified":"2026-06-17T09:36:57Z","products":[{"vendor":"themefunction","product":"wordpress event manager, event calendar and booking plugin"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/eventin-pro/vulnerability/wordpress-wordpress-event-manager-event-calendar-and-booking-plugin-plugin-4-0-24-arbitrary-content-deletion-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52731"},{"url":"https://patchstack.com/database/wordpress/plugin/eventin-pro/vulnerability/wordpress-wordpress-event-manager-event-calendar-and-booking-plugin-plugin-4-0-24-arbitrary-content-deletion-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-f3x4-877m-pv24"}],"sources":{"cve":[{"id":"CVE-2025-52731","title":"WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin \u003c= 4.0.24 - Arbitrary Content Deletion Vulnerability","description":"Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through \u003c= 4.0.24.","status":"published","published":"2025-08-14T10:34:01.225Z","modified":"2026-04-28T16:13:17.77Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:32:31.309974Z"}],"euvd":[{"id":"EUVD-2025-24788","description":"Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through \u003c= 4.0.24.","status":"published","published":"2025-08-14T10:34:01Z","modified":"2026-04-28T16:13:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T19:05:38.454261Z"}],"ghsa":[{"id":"GHSA-f3x4-877m-pv24","title":"Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and...","description":"Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through 4.0.24.","status":"published","published":"2025-08-14T12:30:25Z","modified":"2025-08-14T12:30:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:03:17.959289Z"}],"nvd":[{"id":"CVE-2025-52731","description":"Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through \u003c= 4.0.24.","status":"published","published":"2025-08-14T11:15:42.82Z","modified":"2026-06-17T09:36:57.497Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:11:23.594522Z"}]}}