Wp Event Manager vulnerabilities

Products

• Event Manager 5
• User Profile Avatar 5
• – Events Calendar, Registrations, Sell Tickets With Woocommerce 2

Newest

• unknown wp event manager, wp event manager event manager +1 more WP Event Manager 3.4.0 - 3.4.1 - Unauthenticated Unpublished Post Overwrite via IDOR CVE-2026-86442 8.2 HighNovember 5, 2026
• unknown wp event manager, wp event manager event manager +1 more WP Event Manager < 3.4.2 - Subscriber+ Arbitrary Post Takeover via event_organizer_ids CVE-2026-16304 8.1 HighNovember 5, 2026
• ashok dudhat wp event manager, wp event manager event manager +1 more WordPress WP Event Manager plugin <= 3.4.1 - Broken Access Control vulnerability CVE-2026-62041 5.4 MediumOctober 9, 2026
• wp event manager user profile avatar WordPress WP User Profile Avatar plugin <= 1.0.6 - Broken Access Control Vulnerability CVE-2025-49980 4.3 MediumJune 20, 2025
• wp event manager event manager WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability CVE-2025-48125 8.1 HighJune 9, 2025
• wp event manager event manager WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability CVE-2025-32225 5.3 MediumApril 4, 2025
• wp event manager user profile avatar, wpeventmanager wp user profile avatar +1 more WP User Profile Avatar <= 1.0.5 - Cross-Site Request Forgery to Settings Update CVE-2024-10789 4.3 MediumJanuary 16, 2025
• unknown wp user profile avatar, wp event manager user profile avatar +1 more WP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSS CVE-2023-6067 5.4 MediumApril 15, 2024
• wp event manager user profile avatar, wp-eventmanager wp event manager +1 more WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-52118 6.5 MediumFebruary 1, 2024
• unknown wp user profile avatar, wp event manager user profile avatar +1 more WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR CVE-2023-6384 4.3 MediumJanuary 22, 2024
• wp event manager – events calendar, registrations, sell tickets with woocommerce, wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +2 more WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49181 5.9 MediumDecember 15, 2023
• wp event manager – events calendar, registrations, sell tickets with woocommerce, wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +2 more WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47697 7.1 HighNovember 13, 2023