EUVD-2026-57956

Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...

CVE-2026-28173 WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability

Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...

WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by VanTastic in WordPress Plugin WP Event SOlution versions = 4.1.19...

WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by VanTastic in WordPress Plugin WP Event SOlution versions = 4.1.18...

WordPress Eventin plugin < 4.1.20 - Contributor+ Order Information Disclosure via IDOR vulnerability

Contributor+ Order Information Disclosure via IDOR vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin WP Event SOlution versions 4.1.20...

WordPress Eventin plugin < 4.1.20 - Contributor+ Customer PII Disclosure via REST API vulnerability

Contributor+ Customer PII Disclosure via REST API vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin WP Event SOlution versions 4.1.20...

PT-2026-71522

Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...

CVE-2026-28173: Missing Authorization

Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...

PT-2026-71523

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

CVE-2026-28174: Insertion of Sensitive Information Into Sent Data

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

CVE-2026-66451

Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...

CVE-2026-66451: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...

CVE-2025-68045: Missing Authorization

Unauthenticated Broken Access Control in WP Event SOlution = 4.1.12 versions...

CVE-2026-40776: Missing Authorization

Unauthenticated Broken Access Control in WP Event SOlution = 4.1.8 versions...

CVE-2025-68047

Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through = 4.1.3...

CVE-2025-68047

Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through = 4.1.1...

CVE-2025-68047: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through = 4.1.3...

CVE-2025-49869: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through = 4.0.31...

CVE-2025-49321: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arraytics Eventin wp-event-solution allows Reflected XSS.This issue affects Eventin: from n/a through = 4.0.28...

CVE-2025-47539: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through = 4.0.26...