Skip to contentArraytics Eventin – Event Calendar, Tickets, Registration, Booking & Woocommerce vulnerabilities
- arraytics eventin – event calendar, tickets, registration, booking & woocommerceEventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap FilterCVE-2026-759837.5 High
- arraytics eventin – event calendar, tickets, registration, booking & woocommerceEventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot ParameterCVE-2026-154026.4 Medium
- arraytics eventin – event calendar, tickets, registration, booking & woocommerceEventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API EndpointCVE-2026-118215.4 Medium
- arraytics eventin – event calendar, tickets, registration, booking & woocommerceEventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' ParameterCVE-2026-156677.5 High
- arraytics eventin – event calendar, tickets, registration, booking & woocommerceEventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' ParameterCVE-2026-154067.5 High
- arraytics eventin – event calendar, tickets, registration, booking & woocommerceEventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' ParameterCVE-2026-129565.3 Medium