CVE-2025-3419

CVE-2025-3419 - WordPress Eventin = 4.0.26 - Lettura Arbitraria di File 🔥 Riepilogo della Vulnerabilità Il plugin Eventin = 4.0.26 per WordPress contiene una vulnerabilità di lettura arbitraria di file non autenticata nella funzione proxyimage. Gli attaccanti sfruttano una validazione insufficien...

CVE-2025-7813: Server-Side Request Forgery (SSRF)

The Events Calendar, Event Booking, Registrations and Event Tickets – Eventin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.37 via the proxyimage function. This makes it possible for unauthenticated attackers to make web requests to...

CVE-2025-3419: External Control of File Name or Path

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the proxyimage function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on...