Advisories · Technology
Arraytics Eventin.
Every CVE that names Arraytics Eventin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability
- Arraytics Eventin
- Insecure deserialization
- CVSS 8.8 High
WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection Vulnerability
- Arraytics Eventin
- Insecure deserialization
- CVSS 7.1 High
WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability
- Arraytics Eventin
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability
- Arraytics Eventin
- Privilege escalation
- CVSS 7.5 High
WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability
- Arraytics Eventin
- Path traversal
- CVSS 7.5 High
WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability
- Arraytics Eventin
- File inclusion
- CVSS 7.5 High
WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability
- Arraytics Eventin
- File inclusion
- CVSS 6.5 Medium
WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability
- Arraytics Eventin
- Path traversal
- CVSS 5.4 Medium
WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability
- Arraytics Eventin
- Broken access control