Eventin vulnerabilities

8 known vulnerabilities in Eventin from Arraytics. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Eventin: Deserialization of Untrusted Data

  CVE-2025-68047Jan 22, 2026Arraytics

  Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through <= 4.1.3.

• 8.8 High severity

  Eventin: Deserialization of Untrusted Data

  CVE-2025-49869Aug 14, 2025Arraytics

  Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through <= 4.0.31.

• 9.8 Critical severity

  Eventin: Incorrect Privilege Assignment

  CVE-2025-47539May 23, 2025ArrayticsEPSS 25.4%

  Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through <= 4.0.26.

• 9.8 Critical severity

  Eventin: Relative Path Traversal

  CVE-2025-47445May 14, 2025ArrayticsEPSS 5.25%

  Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.26.

• 7.5 High severity

  Eventin: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-39584Apr 16, 2025Arraytics

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File Inclusion.This issue affects Eventin: from n/a through <= 4.0.25.

• 8.8 High severity

  Eventin: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-26964Feb 25, 2025Arraytics

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File Inclusion.This issue affects Eventin: from n/a through <= 4.0.20.

• 8.8 High severity

  Eventin: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-56213Dec 31, 2024Arraytics

  Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.7.

• 8.8 High severity

  Eventin: Missing Authorization

  CVE-2023-49756Dec 9, 2024Arraytics

  Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventin: from n/a through <= 3.3.52.