Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Eventin 4.1.21 Clear all filters
TI-2026-11187 CVE-2026-13175 · GHSA-763p-gv7w-jwrq

Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR

Priority LOW 29

The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contributor-level access and above to alter or delete schedule entries…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00418 Published 2026-08-19 Fixed in 4.1.21 CWE-639
TI-2026-11186 CVE-2026-13174 · GHSA-49r9-8f5q-59ff

Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR

Priority LOW 32

The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and above to permanently delete other users' accounts.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00462 Published 2026-08-19 Fixed in 4.1.21 CWE-284
TI-2026-11185 CVE-2026-13173 · GHSA-cq65-6mp3-935p

Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation

Priority LOW 13

The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-leve…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00281 Published 2026-08-19 Fixed in 4.1.21 CWE-862
TI-2026-11181 CVE-2026-13169 · GHSA-f556-jv65-29j9

Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR

Priority LOW 37

The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0035 Published 2026-08-19 Fixed in 4.1.21 CWE-639