Unknown Events Manager vulnerabilities
8 published CVEs name Unknown Events Manager among the affected products.
- 8Published CVEs8 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-93662
Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter
Unknown · Events Manager
Medium4.3 - CVE-2026-93661
Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR
Unknown · Events Manager
Low2.7 - CVE-2026-18366
Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator
Unknown · Events Manager
Critical9.8 - CVE-2026-18057
Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection
Unknown · Events Manager
High8.1 - CVE-2026-18050
Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads
Unknown · Events Manager
High7.5 - CVE-2026-12987
Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration
Unknown · Events Manager
High7.5 - CVE-2020-35037
Events Manager < 5.9.8 - Cross-Site Scripting (XSS)
Unknown · Events Manager
Medium6.1 - CVE-2020-35012
Events Manager < 5.9.8 - Admin+ SQL Injection
Unknown · Events Manager
High7.2