# arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered). Every CVE that names arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API](https://agentprime.io/advisories/CVE-2026-13039.md) `CVE-2026-13039` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Broken access control - [Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter](https://agentprime.io/advisories/CVE-2026-12924.md) `CVE-2026-12924` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 6.4 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Cross-site scripting (XSS) - [Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure](https://agentprime.io/advisories/CVE-2026-4109.md) `CVE-2026-4109` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 4.3 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Broken access control - [Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'](https://agentprime.io/advisories/CVE-2025-14657.md) `CVE-2025-14657` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 7.2 High · Not analysed yet · Published 9 Jan 2026 · Tags: Broken access control - [Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2025-7813.md) `CVE-2025-7813` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 7.2 High · Not analysed yet · Published 23 Aug 2025 · Tags: Server-side request forgery (SSRF) - [Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover](https://agentprime.io/advisories/CVE-2025-4796.md) `CVE-2025-4796` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 8.8 High · Not analysed yet · Published 8 Aug 2025 · Tags: Broken access control - [Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read](https://agentprime.io/advisories/CVE-2025-3419.md) `CVE-2025-3419` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 7.5 High · Not analysed yet · Published 8 May 2025 · Tags: Path traversal - [Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update](https://agentprime.io/advisories/CVE-2025-1766.md) `CVE-2025-1766` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 5.3 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Broken access control - [Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2025-1770.md) `CVE-2025-1770` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: Path traversal - [Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-7149.md) `CVE-2024-7149` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 8.8 High · Not analysed yet · Published 27 Sept 2024 · Tags: Path traversal - [Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import](https://agentprime.io/advisories/CVE-2024-6033.md) `CVE-2024-6033` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 4.3 Medium · Not analysed yet · Published 17 Jul 2024 · Tags: Broken access control - [Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export](https://agentprime.io/advisories/CVE-2024-1122.md) `CVE-2024-1122` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 5.3 Medium · Not analysed yet · Published 9 Feb 2024 · Tags: Broken access control ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .