CVE-2024-11133

CVE-2024-11133 affects the WordPress Eventer plugin (Eventer - WordPress Event & Booking Manager Plugin). A missing capability check in handle_pdf_download_request allows unauthenticated users to download event tickets across versions up to 3.9.9. Several connected sources confirm the vulnerabili...

CVE-2025-22635

CVE-2025-22635 corresponds to a Reflected XSS in the WordPress Eventer (Event & Booking Manager) plugin. Public records indicate the vulnerability affects Eventer versions up to 3.9.9 (plugin

CVE-2025-0959

CVE-2025-0959 — Eventer WordPress Plugin vulnerable to SQL Injection via reg_id in versions up to 3.9.9.2. Exploitation requires Subscriber+ authenticated access and can lead to extraction of sensitive data due to insufficient escaping/preparation in the SQL query. Wordfence/CVEs show the issue a...

CVE-2024-11132

CVE-2024-11132 - Eventer (WordPress Plugin) The WordPress Eventer plugin (up to 3.9.9) is vulnerable to Stored Cross‑Site Scripting via shortcode attributes due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at contributor level or higher, enabl...

CVE-2024-11135

CVE-2024-11135 — Eventer (WordPress) SQL Injection : The WordPress Eventer plugin (up to version 3.9.8) is vulnerable to unauthenticated SQL injection via the event parameter in the eventer_get_attendees function. The issue stems from insufficient escaping and lack of prepared statements in the S...

CVE-2024-10799

CVE-2024-10799: Eventer (WordPress Event & Booking Manager Plugin)

CVE-2024-11134

CVE-2024-11134 affects the WordPress Eventer plugin (Eventer - WordPress Event & Booking Manager Plugin). The issue is a missing authorization check on the eventer_export_bookings_csv function, allowing authenticated users with subscriber-level permissions or higher to download bookings that cont...

CVE-2025-39481

CVE-2025-39481 describes a SQL Injection in the WordPress plugin Eventer (imithemes Eventer) via improper neutralization of special elements in SQL commands, enabling Blind SQL Injection. Affected: Eventer versions up to before 3.11.4 (i.e., 3.11.3 and earlier). Impact as per sources is high conf...

CVE-2025-39482

CVE-2025-39482 affects the WordPress plugin Eventer (IMITHEMEs) for WordPress. The issue is a Missing Authorization/broken access-control vulnerability, allowing unauthorized actions due to incorrectly configured access levels. Public details indicate affected versions include Eventer prior to 3....