What’s Vulnerable › Products
imithemes Eventer - WordPress Event & Booking Manager Plugin vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your imithemes Eventer - WordPress Event & Booking Manager Plugin version is affected
Latest imithemes Eventer - WordPress Event & Booking Manager Plugin vulnerabilities
- CVE-2025-39483 — WordPress Eventer plugin < 3.9.9.1 - Content Injection vulnerability (CVSS 6.5)
- CVE-2025-39482 — WordPress Eventer plugin < 3.11.4 - Broken Access Control vulnerability (CVSS 8.8)
- CVE-2025-39481 — WordPress Eventer plugin < 3.11.4 - SQL Injection vulnerability (CVSS 9.8)
- CVE-2025-0959 — Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id (CVSS 6.5)
- CVE-2025-22635 — WordPress Eventer - WordPress Event & Booking Manager Plugin plugin < 3.9.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2024-11134 — Eventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Export (CVSS 6.5)
- CVE-2024-11133 — Eventer <= 3.9.9.5 - Missing Authorization to Unauthenticated Event Ticket Download (CVSS 5.3)
- CVE-2024-11132 — Eventer <= 3.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
- CVE-2024-11135 — Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendees (CVSS 7.5)
- CVE-2024-10799 — Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read (CVSS 6.5)