What’s Vulnerable › Products
EventON vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Check whether your EventON version is affected
Latest EventON vulnerabilities
- CVE-2025-3527 — EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-6910 — EventON < 2.2.17 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2024-4752 — EventON < 2.2.15 - Admin+ Stored Cross-Site Scripting via event subtitle (CVSS 5.9)
- CVE-2024-6180 — EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates (CVSS 7.2)
- CVE-2023-7200 — EventON < 4.4.1 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2024-0238 — EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update (CVSS 6.1)
- CVE-2024-0237 — EventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update (CVSS 5.3)
- CVE-2024-0236 — EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure (CVSS 5.3)
- CVE-2024-0235 — EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure (CVSS 5.3)
- CVE-2024-0233 — EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS (CVSS 6.1)
- CVE-2023-6046 — EventON < 2.2 - Admin+ Stored HTML Injection (CVSS 4.8)
- CVE-2023-6005 — EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2023-6244 — EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings (CVSS 4.3)
- CVE-2023-6242 — EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta (CVSS 4.3)
- CVE-2023-6158 — EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta (CVSS 6.5)
- CVE-2023-4388 — EventON < 2.2 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2023-3219 — EventON < 2.1.2 - Unauthenticated Post Access via IDOR (CVSS 5.3)
- CVE-2023-2796 — EventON < 2.1.2 - Unauthenticated Event Access (CVSS 5.3)
- CVE-2020-29395 — (CVSS 6.1)