Eventer vulnerabilities

3 known vulnerabilities in Eventer from Imithemes. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Eventer: Missing Authorization

  CVE-2025-39482May 16, 2025Imithemes

  Missing Authorization vulnerability in imithemes Eventer eventer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventer: from n/a through < 3.11.4.

• 9.8 Critical severity

  Eventer: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-39481May 16, 2025Imithemes

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in imithemes Eventer eventer allows Blind SQL Injection.This issue affects Eventer: from n/a through < 3.11.4.

• 7.5 High severity

  Eventer - WordPress Event & Booking Manager…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-11135Jan 28, 2025Imithemes

  The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventer_get_attendees' function in all versions up to, and including, 3.9.8 due to insufficient escaping on the user supplied parameter and lack of sufficient pre