What’s Vulnerable › Products

Event Monster vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Event Monster version is affected

Latest Event Monster vulnerabilities

• CVE-2024-11396 — Event monster <= 1.4.3 - Information Exposure Via Visitors List Export (CVSS 5.3)
• CVE-2024-5059 — WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability (CVSS 7.5)
• CVE-2024-1895 — Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta (CVSS 7.5)
• CVE-2023-47525 — WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2022-3720 — Event Monster < 1.2.1 - Admin+ SQLi (CVSS 7.2)
• CVE-2022-3336 — Event Monster < 1.2.0 - Visitors Deletion via CSRF (CVSS 4.3)