Skip to content
OpenAdvisories

Vendor

Themewinter

5 known vulnerabilities.

Products

Eventin 2 WPCafe 2 WP Cafe Pro 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.6
    CVE-2026-66586

    WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability

    Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

    Themewinter WP Cafe Pro
  • Medium 5.9
    CVE-2024-39648

    WordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from n/a through 4.0.5.

    Themewinter Eventin
  • Medium 6.5
    CVE-2024-37507

    WordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themewinter Eventin allows Stored XSS.This issue affects Eventin: from n/a through 3.3.57.

    Themewinter Eventin