WP Event Manager vulnerabilities
6 published CVEs name WP Event Manager among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-49980
WordPress WP User Profile Avatar plugin <= 1.0.6 - Broken Access Control Vulnerability
WP Event Manager · WP User Profile Avatar
Medium4.3 - CVE-2025-48125
WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability
WP Event Manager · WP Event Manager
High8.1 - CVE-2025-32225
WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability
WP Event Manager · WP Event Manager
Medium5.3 - CVE-2023-52118
WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
WP Event Manager · WP User Profile Avatar
Medium6.5 - CVE-2023-49181
WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)
WP Event Manager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Medium5.9 - CVE-2023-47697
WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)
WP Event Manager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
High7.1