Unknown Eventin vulnerabilities

• arraytics eventin Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction Replay CVE-2026-84906 5.3 MediumSeptember 16, 2026
• arraytics eventin Eventin < 4.1.24 - Unauthenticated Order and Attendee Status Reset via Payment REST Endpoint CVE-2026-84907 3.7 LowSeptember 16, 2026
• arraytics eventin Eventin < 4.1.24 - Contributor+ User Creation via Speaker Creation CVE-2026-84905 2.7 LowSeptember 16, 2026
• arraytics eventin Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_token CVE-2026-77702 5.3 MediumSeptember 16, 2026
• arraytics eventin Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization CVE-2026-84901 4.9 MediumSeptember 5, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ LFI via Event Layout Meta CVE-2026-84898 6.6 MediumSeptember 5, 2026
• arraytics eventin Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token CVE-2026-77694 5.3 MediumAugust 26, 2026
• arraytics eventin Eventin < 4.1.22 - Unauthenticated Unpublished Content Disclosure CVE-2026-13172 5.3 MediumAugust 26, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery CVE-2026-13176 2.7 LowAugust 21, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR CVE-2026-13175 6.5 MediumAugust 19, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR CVE-2026-13174 7.2 HighAugust 19, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation CVE-2026-13173 2.7 LowAugust 19, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR CVE-2026-13169 8.1 HighAugust 19, 2026
• arraytics eventin Eventin < 4.1.20 - Contributor+ Order Information Disclosure via IDOR CVE-2026-13177 4.3 MediumAugust 12, 2026
• arraytics eventin Eventin < 4.1.20 - Unauthenticated Account Creation via Waiting List Endpoint CVE-2026-13171 8.2 HighAugust 12, 2026
• arraytics eventin Eventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST API CVE-2026-13168 6.5 MediumAugust 12, 2026
• arraytics eventin Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting CVE-2026-13170 7.2 HighAugust 10, 2026
• arraytics eventin Eventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status Manipulation CVE-2026-13178 7.5 HighJuly 30, 2026