What’s Vulnerable › Products
arraytics Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Latest arraytics Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce vulnerabilities
- CVE-2026-75983 — Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter (CVSS 7.5)
- CVE-2026-15402 — Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter (CVSS 6.4)
- CVE-2026-11821 — Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint (CVSS 5.4)
- CVE-2026-15667 — Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter (CVSS 7.5)
- CVE-2026-15406 — Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter (CVSS 7.5)
- CVE-2026-12956 — Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter (CVSS 5.3)