CVE-2025-3419

CVE-2025-3419 - WordPress Eventin = 4.0.26 - Lecture arbitraire de fichiers 🔥 Résumé de la vulnérabilité Le plugin Eventin = 4.0.26 pour WordPress contient une vulnérabilité de lecture arbitraire de fichiers non authentifiée dans la fonction proxyimage. Les attaquants exploitent une validation...

CVE-2025-7813: Server-Side Request Forgery (SSRF)

The Events Calendar, Event Booking, Registrations and Event Tickets – Eventin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.37 via the proxyimage function. This makes it possible for unauthenticated attackers to make web requests to...

CVE-2025-3419: External Control of File Name or Path

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the proxyimage function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on...