Skip to content
OpenAdvisories
High · 8.8 Scanner template CVE-2025-32614 EUVD-2025-10757GHSA-4g7q-xrgc-v37w

WordPress EventON plugin <= 2.4 - Local File Inclusion vulnerability

Published Apr 11, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON eventon-lite allows PHP Local File Inclusion.This issue affects EventON: from n/a through <= 2.4.

Affected products

VendorProductAffectedFixed
Ashan Perera EventON ≤ 2.4 —

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References