What’s Vulnerable › Products
Eventin vulnerabilities
18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.
Check whether your Eventin version is affected
Latest Eventin vulnerabilities
- CVE-2026-84906 — Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction Replay (CVSS 5.3)
- CVE-2026-84907 — Eventin < 4.1.24 - Unauthenticated Order and Attendee Status Reset via Payment REST Endpoint (CVSS 3.7)
- CVE-2026-84905 — Eventin < 4.1.24 - Contributor+ User Creation via Speaker Creation (CVSS 2.7)
- CVE-2026-77702 — Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_token (CVSS 5.3)
- CVE-2026-84901 — Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization (CVSS 4.9)
- CVE-2026-84898 — Eventin < 4.1.21 - Contributor+ LFI via Event Layout Meta (CVSS 6.6)
- CVE-2026-77694 — Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token (CVSS 5.3)
- CVE-2026-13172 — Eventin < 4.1.22 - Unauthenticated Unpublished Content Disclosure (CVSS 5.3)
- CVE-2026-13176 — Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery (CVSS 2.7)
- CVE-2026-13175 — Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR (CVSS 6.5)
- CVE-2026-13174 — Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR (CVSS 7.2)
- CVE-2026-13173 — Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation (CVSS 2.7)
- CVE-2026-13169 — Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR (CVSS 8.1)
- CVE-2026-13177 — Eventin < 4.1.20 - Contributor+ Order Information Disclosure via IDOR (CVSS 4.3)
- CVE-2026-13171 — Eventin < 4.1.20 - Unauthenticated Account Creation via Waiting List Endpoint (CVSS 8.2)
- CVE-2026-13168 — Eventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST API (CVSS 6.5)
- CVE-2026-13170 — Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting (CVSS 7.2)
- CVE-2026-13178 — Eventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status Manipulation (CVSS 7.5)