Skip to content
OpenAdvisories

Product · Ashan Jay

EventON

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-63064

    WordPress EventON plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON eventon allows Stored XSS.This issue affects EventON: from n/a through <= 4.9.12.

    Ashan Jay EventON
  • Medium 6.3
    CVE-2025-47565

    WordPress EventON plugin <= 4.9.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ashanjay EventON eventon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventON: from n/a through <= 4.9.9.

    Ashan Jay EventON
  • Medium 5.3
    CVE-2025-47564

    WordPress EventON plugin <= 4.9.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ashanjay EventON eventon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects EventON: from n/a through <= 4.9.8.

    Ashan Jay EventON
  • Medium 5.9
    CVE-2024-33940

    WordPress EventON plugin <= 2.2.14 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashan Jay EventON allows Stored XSS.This issue affects EventON: from n/a through 2.2.14.

    Ashan Jay EventON