Myeventon Eventon vulnerabilities

• myeventon eventon, eventon (pro) - wordpress virtual event calendar plugin +1 more EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2025-3527 6.4 MediumMay 17, 2025
• eventon (pro) - wordpress virtual event calendar plugin, myeventon eventon-lite +1 more EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email CVE-2023-6243 4.3 MediumOctober 19, 2024
• ashanjay eventon, eventon wordpress plugin wordpress plugin +1 more EventON < 2.2.17 - Admin+ Stored XSS CVE-2024-6910 4.8 MediumSeptember 9, 2024
• ashanjay eventon EventON < 2.2.15 - Admin+ Stored Cross-Site Scripting via event subtitle CVE-2024-4752 5.9 MediumJuly 13, 2024
• myeventon eventon, ashanjay eventon – events calendar +1 more EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates CVE-2024-6180 7.2 HighJuly 9, 2024
• ashanjay eventon EventON < 4.4.1 - Reflected Cross-Site Scripting CVE-2023-7200 6.1 MediumJanuary 29, 2024
• ashanjay eventon, unknown eventon premium +1 more EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update CVE-2024-0238 6.1 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure CVE-2024-0235 Public exploit EPSS 38.0% 5.3 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS CVE-2024-0233 6.1 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting CVE-2023-6005 4.8 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure CVE-2024-0236 5.3 MediumJanuary 16, 2024
• ashanjay eventon, unknown eventon premium +1 more EventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update CVE-2024-0237 5.3 MediumJanuary 16, 2024
• ashanjay eventon EventON < 2.2 - Admin+ Stored HTML Injection CVE-2023-6046 4.8 MediumJanuary 16, 2024
• myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 more EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta CVE-2023-6242 6.5 MediumJanuary 11, 2024
• myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 more EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings CVE-2023-6244 6.5 MediumJanuary 11, 2024
• myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 more EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta CVE-2023-6158 6.5 MediumJanuary 10, 2024
• ashanjay eventon – events calendar, myeventon eventon-lite +1 more EventON <= 2.2.2 - Reflected Cross-Site Scripting CVE-2023-4635 6.1 MediumOctober 21, 2023
• ashanjay eventon EventON < 2.2 - Admin+ Stored XSS CVE-2023-4388 4.8 MediumOctober 16, 2023
• ashanjay eventon EventON < 2.1.2 - Unauthenticated Post Access via IDOR CVE-2023-3219 Public exploit 5.3 MediumJuly 10, 2023
• ashanjay eventon EventON < 2.1.2 - Unauthenticated Event Access CVE-2023-2796 Public exploit EPSS 42.7% 5.3 MediumJuly 10, 2023
• myeventon eventon The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field. CVE-2020-29395 Public exploit EPSS 12.9% 6.1 MediumNovember 30, 2020