What’s Vulnerable › Products

Event Booking Manager for WooCommerce vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Event Booking Manager for WooCommerce version is affected

Latest Event Booking Manager for WooCommerce vulnerabilities

• CVE-2026-91077 — Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_list (CVSS 2.7)
• CVE-2026-91019 — Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure (CVSS 4.9)
• CVE-2026-91008 — Event Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation Panel (CVSS 3.7)
• CVE-2026-16064 — Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event (CVSS 5.4)
• CVE-2026-16063 — Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content (CVSS 5.4)
• CVE-2026-16062 — Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content (CVSS 6.6)