Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ThemewinterEventin

13 matches found

CVE
CVE•added 2025/05/23 1:15 p.m.•169 views

CVE-2025-47539

Incorrect Privilege Assignment vulnerability in Themewinter Eventin allows Privilege Escalation. This issue affects Eventin: from n/a through 4.0.26.

9.8CVSS9.6AI score0.13411EPSS
CVE
CVE•added 2025/02/25 3:15 p.m.•52 views

CVE-2025-26964

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themewinter Eventin allows PHP Local File Inclusion. This issue affects Eventin: from n/a through 4.0.20.

7.5CVSS7.7AI score0.00132EPSS
CVE
CVE•added 2025/03/20 6:15 a.m.•49 views

CVE-2025-1770

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.24 via the 'style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inc...

8.8CVSS8.9AI score0.00211EPSS
CVE
CVE•added 2025/05/08 6:15 a.m.•49 views

CVE-2025-3419

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the proxy_image() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on...

7.5CVSS7.4AI score0.00033EPSS
CVE
CVE•added 2024/08/01 10:15 p.m.•48 views

CVE-2024-39648

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from n/a through 4.0.5.

5.9CVSS5.7AI score0.00133EPSS
CVE
CVE•added 2024/12/09 1:15 p.m.•45 views

CVE-2023-49756

Missing Authorization vulnerability in Themewinter Eventin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventin: from n/a through 3.3.52.

5.4CVSS5.6AI score0.00103EPSS
CVE
CVE•added 2024/12/31 10:15 a.m.•45 views

CVE-2024-56213

Path Traversal: '.../...//' vulnerability in Themewinter Eventin allows Path Traversal.This issue affects Eventin: from n/a through 4.0.7.

6.5CVSS6.5AI score0.00184EPSS
CVE
CVE•added 2025/04/16 1:15 p.m.•43 views

CVE-2025-39584

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themewinter Eventin allows PHP Local File Inclusion. This issue affects Eventin: from n/a through 4.0.25.

7.5CVSS7.7AI score0.0017EPSS
CVE
CVE•added 2024/07/21 8:15 a.m.•39 views

CVE-2024-37507

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from n/a through 3.3.57.

6.5CVSS6.5AI score0.00076EPSS
CVE
CVE•added 2024/07/17 7:15 a.m.•39 views

CVE-2024-6033

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized data importation due to a missing capability check on the 'import_file' function in all versions up to, and including, 4.0.4. This makes it possible for authenticated attackers, w...

4.3CVSS4.7AI score0.00034EPSS
CVE
CVE•added 2024/09/27 2:15 p.m.•39 views

CVE-2024-7149

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.8 via multiple style parameters. This makes it possible for authenticated attackers, with Contributor-level access and above, to ...

8.8CVSS8.9AI score0.00987EPSS
CVE
CVE•added 2024/02/09 5:15 a.m.•37 views

CVE-2024-1122

The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_data() function in all versions up to, and including, 3.3.50. This makes it possible for unauthenticated att...

5.3CVSS6AI score0.00184EPSS
CVE
CVE•added 2025/05/14 12:15 p.m.•32 views

CVE-2025-47445

Relative Path Traversal vulnerability in Themewinter Eventin allows Path Traversal.This issue affects Eventin: from n/a through 4.0.26.

7.5CVSS7.5AI score0.00065EPSS