What’s Vulnerable › Products

ashanjay EventON – Events Calendar vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ashanjay EventON – Events Calendar version is affected

Latest ashanjay EventON – Events Calendar vulnerabilities

• CVE-2025-8091 — EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure (CVSS 4.3)
• CVE-2023-6243 — EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email (CVSS 4.3)
• CVE-2023-6244 — EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings (CVSS 4.3)
• CVE-2023-6242 — EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta (CVSS 4.3)
• CVE-2023-6158 — EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta (CVSS 6.5)
• CVE-2023-4635 — EventON <= 2.2.2 - Reflected Cross-Site Scripting (CVSS 6.1)