Vulnerability history

Contributor+ User Creation vulnerability

Unauthenticated Payment Bypass vulnerability

Unauthenticated Order and Attendee Status Reset vulnerability

Unauthenticated Ticket Price Rewrite vulnerability

WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter vulnerability

Authenticated (Contributor+) Local File Inclusion vulnerability

Missing Authorization to Authenticated (Subscriber+) Notification Flow Management vulnerability

Authenticated (Custom+) Local File Inclusion vulnerability

Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation vulnerability

Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation vulnerability

Contributor+ LFI vulnerability

Broken Access Control vulnerability

Unauthenticated Order Completion Without Payment vulnerability

Unauthenticated Unpublished Content Disclosure vulnerability

Contributor+ Server-Side Request Forgery vulnerability

Contributor+ Schedule Deletion and Modification via IDOR vulnerability

Contributor+ User Role and Meta Modification via Speaker Creation vulnerability

Contributor+ Speaker Account Deletion via IDOR vulnerability

Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR vulnerability

Editor+ Local File Inclusion via speaker_template Setting vulnerability

Arbitrary Content Deletion vulnerability

Sensitive Data Exposure vulnerability

Unauthenticated Account Creation via Waiting List Endpoint vulnerability

Contributor+ Order Information Disclosure via IDOR vulnerability

Contributor+ Customer PII Disclosure via REST API vulnerability

Broken Authentication vulnerability

Unauthenticated Payment Bypass vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin 4.0.25-4.1.15 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure vulnerability

Authenticated (Contributor+) Local File Inclusion vulnerability

PHP Object Injection vulnerability

Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings' vulnerability

Unauthenticated Server-Side Request Forgery vulnerability

Unauthenticated Arbitrary File Read vulnerability

PHP Object Injection Vulnerability

Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover vulnerability

Cross Site Scripting (XSS) Vulnerability

Arbitrary File Download Vulnerability

Privilege Escalation Vulnerability

Local File Inclusion Vulnerability

Missing Authorization to Unauthenticated Payment Status Update vulnerability

Authenticated (Contributor+) Local File Inclusion vulnerability

Local File Inclusion vulnerability

Contributor+ Limited Local File Inclusion vulnerability

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Authenticated (Contributor+) Event Data Import vulnerability

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Unauthenticated Events Export vulnerability

Authenticated Notice Dismissal Vulnerability