Imithemes Eventer vulnerabilities

• imithemes eventer WordPress Eventer plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-27394 7.1 HighOctober 29, 2026
• imithemes eventer Eventer <= 4.4.2 - Unauthenticated SQL Injection via 'code' Parameter CVE-2026-9700 7.5 HighJuly 8, 2026
• imithemes eventer Eventer <= 4.4.2 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation CVE-2026-9701 9.8 CriticalJuly 8, 2026
• imithemes eventer WordPress Eventer plugin < 3.9.9.1 - Content Injection vulnerability CVE-2025-39483 6.5 MediumAugust 14, 2025
• imithemes eventer WordPress Eventer plugin < 3.11.4 - SQL Injection vulnerability CVE-2025-39481 9.3 CriticalMay 16, 2025
• imithemes eventer WordPress Eventer plugin < 3.11.4 - Broken Access Control vulnerability CVE-2025-39482 4.3 MediumMay 16, 2025
• imithemes eventer, eventer - wordpress event & booking manager plugin +1 more Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id CVE-2025-0959 8.8 HighMarch 7, 2025
• imithemes eventer WordPress Eventer - WordPress Event & Booking Manager Plugin plugin < 3.9.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-22635 7.1 HighFebruary 23, 2025
• imithemes eventer, eventer - wordpress event & booking manager plugin +1 more Eventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Export CVE-2024-11134 4.3 MediumFebruary 3, 2025
• imithemes eventer, eventer - wordpress event & booking manager plugin +1 more Eventer <= 3.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-11132 6.4 MediumFebruary 3, 2025
• imithemes eventer, eventer - wordpress event & booking manager plugin +1 more Eventer <= 3.9.9.5 - Missing Authorization to Unauthenticated Event Ticket Download CVE-2024-11133 5.3 MediumFebruary 3, 2025
• imithemes eventer, eventer - wordpress event & booking manager plugin +1 more Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendees CVE-2024-11135 7.5 HighJanuary 28, 2025
• imithemes eventer, eventer - wordpress event & booking manager plugin +1 more Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read CVE-2024-10799 6.5 MediumJanuary 17, 2025