High · 7.5 CVE-2025-52731 EUVD-2025-24788GHSA-f3x4-877m-pv24

WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Arbitrary Content Deletion Vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: themefunction Product: WordPress Event Manager, Event Calendar and Booking Plugin Category: Web / CMS

Description

Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through <= 4.0.24.

Affected products

Vendor	Product	Affected	Fixed
themefunction	WordPress Event Manager, Event Calendar and Booking Plugin	≤ 4.0.24	—

References

https://patchstack.com/database/Wordpress/Plugin/eventin-pro/vulnerability/wordpress-wordpress-event-manager-event-calendar-and-booking-plugin-plugin-4-0-24-arbitrary-content-deletion-vulnerability?_s_id=cve vdb-entry