Exploit for Incorrect Privilege Assignment in Themewinter Eventin

CVE-2025-47539 Exploit Overview This repository contains a...

CVE-2025-47539

Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through = 4.0.26...

CVE-2025-47539

The CVE concerns the WordPress Eventin plugin (versions up to 4.0.26) with an unauthenticated privilege-escalation in a REST API endpoint. The underlying issue is a missing permission check in import_items(), allowing attackers to import users with arbitrary roles (including administrator) and po...

CVE-2025-47539

creationtimestamp| type| source ---|---|--- 2025-05-20 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc5qhlo2n 2025-05-23 17:49:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17451 2025-05-26 14:47:26+00:00| confirmed|...

Exploit for Incorrect Privilege Assignment in Themewinter Eventin

🚨 CVE-2025-47539 – WordPress Eventin Plugin Critical Exploit...

WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by Denver Jackson in WordPress Plugin Eventin versions = 4.0.26...