EventON vulnerabilities
We track 3 vulnerabilities in EventON products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2026.
Latest EventON vulnerabilities
- 7.5 High severity
EventON - Subscriber: Improper Neutralization of Special Elements used in an SQL Command
The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and including, 1.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exi
- 7.3 High severity
EventON Action User: Missing Authorization
The EventON Action User plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.5.14. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthe
- 9.8 Critical severity
EventON (Pro) - WordPress Virtual Event…: Improper Neutralization of Special Elements used in an SQL Command
The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress (full) is vulnerable to SQL Injection via the WordPress 'search' parameter in versions up to, and including, 5.0.11 due to insufficient escaping on the user supplied parameter and lack