What’s Vulnerable › Products

Event Espresso 4 Decaf vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Event Espresso 4 Decaf version is affected

Latest Event Espresso 4 Decaf vulnerabilities

• CVE-2025-68007 — WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability (CVSS 6.5)
• CVE-2024-56251 — WordPress Event Espresso plugin <= 5.0.28.decaf - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2023-27437 — WordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerability (CVSS 3.7)