What’s Vulnerable › Products

WP Events Manager vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your WP Events Manager version is affected

Latest WP Events Manager vulnerabilities

• CVE-2026-15148 — WP Events Manager < 2.2.5 - Unauthenticated Payment Bypass and Booking Status Update via IDOR (CVSS 5.3)
• CVE-2026-14205 — WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter (CVSS 9.8)