CVE-2025-52731

🗓️ 14 Aug 2025 10:34:01Reported by PatchstackType

Missing auth in WP EM, EventCal and BookingPlugin misconfigured access control; affected n/a 4.0.24

Reporter	Title	Published	Views	Family All 9
CNNVD	WordPress plugin WordPress Event Manager, Event Calendar and Booking Plugin 安全漏洞	14 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-52731 WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Arbitrary Content Deletion Vulnerability	14 Aug 202510:34	–	cvelist
EUVD	EUVD-2025-24788	3 Oct 202520:07	–	euvd
NVD	CVE-2025-52731	14 Aug 202511:15	–	nvd
Patchstack	WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Arbitrary Content Deletion Vulnerability	13 Aug 202511:46	–	patchstack
Positive Technologies	PT-2025-33211 · WordPress · Events Manager	14 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-52731	16 Aug 202511:25	–	redhatcve
Vulnrichment	CVE-2025-52731 WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Arbitrary Content Deletion Vulnerability	14 Aug 202510:34	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (August 11, 2025 to August 17, 2025)	21 Aug 202514:13	–	wordfence

Vulners

Node

themefunction wordpress_event_manager,_event_calendar_and_booking_pluginRange≤4.0.24wordpress

[
  {
    "collectionURL": "https://codecanyon.net",
    "defaultStatus": "unaffected",
    "packageName": "eventin-pro",
    "product": "WordPress Event Manager, Event Calendar and Booking Plugin",
    "vendor": "themefunction",
    "versions": [
      {
        "changes": [
          {
            "at": "4.0.25",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.0.24",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/Wordpress/Plugin/eventin-pro/vulnerability/wordpress-wordpress-event-manager-event-calendar-and-booking-plugin-plugin-4-0-24-arbitrary-content-deletion-vulnerability

28 Apr 2026 16:13Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

EPSS0.00075

SSVC

CWE-862