Ashanjay Eventon vulnerabilities

• ashan perera eventon WordPress EventON plugin <= 2.5.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-81791 6.5 MediumSeptember 10, 2026
• ashanjay eventon WordPress EventON plugin <= 4.9.12 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-28037 7.1 HighMarch 5, 2026
• ashanjay eventon WordPress EventON plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability CVE-2025-63064 6.5 MediumDecember 9, 2025
• ashanjay eventon – events calendar EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure CVE-2025-8091 Public exploit 4.3 MediumAugust 15, 2025
• ashanjay eventon WordPress EventON plugin <= 4.9.9 - Broken Access Control vulnerability CVE-2025-47565 6.3 MediumJuly 4, 2025
• ashanjay eventon WordPress EventON plugin <= 4.9.8 - Broken Access Control vulnerability CVE-2025-47564 5.3 MediumMay 16, 2025
• ashan perera eventon WordPress EventON plugin <= 2.4.4 - Broken Access Control Vulnerability CVE-2025-48116 5.3 MediumMay 16, 2025
• ashan perera eventon WordPress EventON plugin <= 2.4.1 - Local File Inclusion Vulnerability CVE-2025-47494 7.5 HighMay 7, 2025
• ashan perera eventon WordPress EventON plugin <= 2.4 - Local File Inclusion vulnerability CVE-2025-32614 8.8 HighApril 11, 2025
• ashan perera eventon WordPress EventON plugin <= 2.4.1 - Local File Inclusion vulnerability CVE-2025-32160 7.5 HighApril 10, 2025
• ashanjay eventon, eventon wordpress plugin wordpress plugin +1 more EventON < 2.2.17 - Admin+ Stored XSS CVE-2024-6910 4.8 MediumSeptember 9, 2024
• ashanjay eventon EventON < 2.2.15 - Admin+ Stored Cross-Site Scripting via event subtitle CVE-2024-4752 5.9 MediumJuly 13, 2024
• myeventon eventon, ashanjay eventon – events calendar +1 more EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates CVE-2024-6180 7.2 HighJuly 9, 2024
• ashan jay eventon WordPress EventON plugin <= 2.2.14 - Cross Site Scripting (XSS) vulnerability CVE-2024-33940 5.9 MediumMay 3, 2024
• ashanjay eventon EventON < 4.4.1 - Reflected Cross-Site Scripting CVE-2023-7200 6.1 MediumJanuary 29, 2024
• ashanjay eventon, unknown eventon premium +1 more EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update CVE-2024-0238 6.1 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure CVE-2024-0235 Public exploit EPSS 38.0% 5.3 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS CVE-2024-0233 6.1 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting CVE-2023-6005 4.8 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure CVE-2024-0236 5.3 MediumJanuary 16, 2024
• ashanjay eventon, unknown eventon premium +1 more EventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update CVE-2024-0237 5.3 MediumJanuary 16, 2024
• ashanjay eventon EventON < 2.2 - Admin+ Stored HTML Injection CVE-2023-6046 4.8 MediumJanuary 16, 2024
• myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 more EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta CVE-2023-6242 6.5 MediumJanuary 11, 2024
• myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 more EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings CVE-2023-6244 6.5 MediumJanuary 11, 2024
• myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 more EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta CVE-2023-6158 6.5 MediumJanuary 10, 2024
• ashanjay eventon – events calendar, myeventon eventon-lite +1 more EventON <= 2.2.2 - Reflected Cross-Site Scripting CVE-2023-4635 6.1 MediumOctober 21, 2023
• ashanjay eventon EventON < 2.2 - Admin+ Stored XSS CVE-2023-4388 4.8 MediumOctober 16, 2023
• ashanjay eventon EventON < 2.1.2 - Unauthenticated Post Access via IDOR CVE-2023-3219 Public exploit 5.3 MediumJuly 10, 2023
• ashanjay eventon EventON < 2.1.2 - Unauthenticated Event Access CVE-2023-2796 Public exploit EPSS 42.7% 5.3 MediumJuly 10, 2023