Advisories · Technology

imithemes Eventer.

Every CVE that names imithemes Eventer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-39483 CVE record

CVSS 6.5 Medium

WordPress Eventer plugin < 3.9.9.1 - Content Injection vulnerability
- imithemes Eventer
- Code injection
Not analysed yet 14 Aug 2025
CVE-2025-39481 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Eventer plugin < 3.11.4 - SQL Injection vulnerability
- imithemes Eventer
- SQL injection
Not analysed yet 16 May 2025
CVE-2025-39482 CVE record

CVSS 4.3 Medium

WordPress Eventer plugin < 3.11.4 - Broken Access Control vulnerability
- imithemes Eventer
- Broken access control
Not analysed yet 16 May 2025
CVE-2025-22635 CVE record

CVSS 7.1 High

WordPress Eventer - WordPress Event & Booking Manager Plugin plugin < 3.9.9 - Reflected Cross Site Scripting (XSS) vulnerability
- imithemes Eventer
- Cross-site scripting (XSS)
Not analysed yet 23 Feb 2025