Skip to content
OpenAdvisories

Product · imithemes

Eventer - WordPress Event & Booking Manager Plugin

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-0959

    Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id

    The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the reg_id parameter in all versions up to, and including, 3.9.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficien…

    imithemes Eventer - WordPress Event & Booking Manager Plugin Web / CMS
  • High 7.5
    CVE-2024-11135

    Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendees

    The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventer_get_attendees' function in all versions up to, and including, 3.9.8 due to insufficient escaping on the user supplied parameter and lack of sufficient pr…

    imithemes Eventer - WordPress Event & Booking Manager Plugin Web / CMS