Skip to content
Eventon vulnerabilities
Newest
-
eventon - subscriber
EventON - Subscriber <= 1.4.5 - Unauthenticated SQL Injection via 'email' Parameter
CVE-2026-93300
Public exploit
7.5 High
-
eventon action user
EventON Action User <= 2.5.14 - Missing Authorization to Unauthenticated Privilege Escalation via evoau_save_capability AJAX Action
CVE-2026-10033
7.3 High
-
eventon (pro) - wordpress virtual event calendar plugin
EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter
CVE-2026-9711
9.8 Critical
-
myeventon eventon, eventon (pro) - wordpress virtual event calendar plugin +1 more
EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2025-3527
6.4 Medium
-
eventon (pro) - wordpress virtual event calendar plugin, myeventon eventon-lite +1 more
EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email
CVE-2023-6243
4.3 Medium
-
myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 more
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
CVE-2023-6242
6.5 Medium
-
myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 more
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings
CVE-2023-6244
6.5 Medium
-
myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 more
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
CVE-2023-6158
6.5 Medium