Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: themefunction Clear all filters
TI-2025-32780 CVE-2025-52730 · GHSA-gxh3-ww79-9v9q

Cross-site scripting in themefunction WordPress Event Manager, Event Calendar and Booking…

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Stored XSS.This issue affe…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00235 Published 2025-08-14 No fix listed CWE-79
TI-2025-32781 CVE-2025-52731 · GHSA-f3x4-877m-pv24

Missing authorization in themefunction WordPress Event Manager, Event Calendar and…

Priority LOW 39

Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordP…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00399 Published 2025-08-14 No fix listed CWE-862