Skip to content
OpenAdvisories

Vendor

WP Event Manager

6 known vulnerabilities.

Products

WP User Profile Avatar 2 WP Event Manager 2 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-49980

    WordPress WP User Profile Avatar plugin <= 1.0.6 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in WP Event Manager WP User Profile Avatar wp-user-profile-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Profile Avatar: from n/a through <= 1.0.6.

    WP Event Manager WP User Profile Avatar
  • Medium 5.3
    CVE-2025-32225

    WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through <= 3.2.0.

    WP Event Manager WP Event Manager
  • Medium 6.5
    CVE-2023-52118

    WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager WP User Profile Avatar allows Stored XSS.This issue affects WP User Profile Avatar: from n/a through 1.0.

    WP Event Manager WP User Profile Avatar
  • Medium 5.9
    CVE-2023-49181

    WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce allows Stored XSS.This issue affects WP Event Manager – Eve…

    WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce Web / CMS