WP Events Manager vulnerabilities
We track 1 vulnerability in WP Events Manager products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest WP Events Manager vulnerabilities
- 9.8 Critical severity
WP Events Manager: Improper Authentication
The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the attacker-controlled quantity, allowing any authenticated user to create a completed booking for a pai