Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce vulnerabilities

3 known vulnerabilities in Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce from Arraytics. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Eventin – Event Calendar, Tickets…: Improper Privilege Management

  CVE-2026-75983Sep 15, 2026Arraytics

  The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.23. This is due to the `PermissionManager::manage_permissions()` function being regi

• 7.5 High severity

  Eventin – Event Calendar, Tickets…: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2026-15667Sep 9, 2026Arraytics

  The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.1.22 via the 'event_layout' parameter parameter. This makes it possible for auth

• 7.5 High severity

  Eventin – Event Calendar, Tickets…: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2026-15406Sep 9, 2026ArrayticsEPSS 1.15%

  The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.1.22 via the 'event_layout' parameter parameter. This makes it possible for auth