Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Themewinter
Eventin

themewinter eventin Vulnerabilities: CVEs, CISA KEV & Security Advisories

16 CVEs

themewinter eventin Vulnerabilities

CVE security advisories and vulnerability history for eventin by themewinter.

16

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

With known exploit

7.0

Avg CVSS

2024–2025

Last updated August 8, 2025

Overview

themewinter eventin has 16 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting themewinter eventin, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of themewinter eventin's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High8

Medium7

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of themewinter eventin's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No themewinter eventin CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every themewinter eventin version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

4.0.273 CVEs
4.0.252 CVEs
4.0.92 CVEs
> 3.3.571 CVE
> 4.0.51 CVE
> 4.0.81 CVE
3.3.511 CVE
3.3.531 CVE
4.0.01 CVE
4.0.211 CVE
4.0.261 CVE
4.0.291 CVE
4.0.351 CVE
4.0.51 CVE
4.0.61 CVE

Find a version

16 CVEs

Sort

Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
CVE-2025-4796
Patch
CWE-639
High · CVSS 8.8
EPSS 0.2% (36th pct)2025-08-08
WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49321
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (38th pct)2025-06-27
WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability
CVE-2025-47539
Patch
CWE-266
Critical · CVSS 9.8
EPSS 27.9% (97th pct)2025-05-23
WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability
CVE-2025-47445
Patch
CWE-23
High · CVSS 7.5
EPSS 7.0% (92th pct)2025-05-14
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read
CVE-2025-3419
Patch
CWE-73
High · CVSS 7.5
EPSS 0.2% (41th pct)2025-05-08
WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability
CVE-2025-39584
Patch
CWE-98
High · CVSS 7.5
EPSS 1.2% (79th pct)2025-04-16
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update
CVE-2025-1766
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.3% (58th pct)2025-03-20
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-1770
Patch
CWE-22
High · CVSS 8.8
EPSS 0.2% (36th pct)2025-03-20
WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability
CVE-2025-26964
Patch
CWE-98
High · CVSS 7.5
EPSS 0.9% (75th pct)2025-02-25
WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability
CVE-2024-56213
Patch
CWE-35
Medium · CVSS 6.5
EPSS 0.8% (75th pct)2024-12-31
WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability
CVE-2023-49756
Patch
CWE-862
Medium · CVSS 5.4
EPSS 0.3% (51th pct)2024-12-09
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-7149
Patch
CWE-22
High · CVSS 8.8
EPSS 0.7% (73th pct)2024-09-27
WordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-39648
Patch
CWE-79
Medium · CVSS 5.9
EPSS 0.2% (43th pct)2024-08-01
WordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37507
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.1% (34th pct)2024-07-21
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import
CVE-2024-6033
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.1% (29th pct)2024-07-17
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
CVE-2024-1122
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.4% (63th pct)2024-02-09

Common weakness types

The CWE weakness categories most often found in themewinter eventin CVEs. Follow any weakness for its full explanation.

CWE-862Missing Authorization4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')2 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVE
CWE-73External Control of File Name or Path1 CVE
CWE-266Incorrect Privilege Assignment1 CVE
CWE-23Relative Path Traversal1 CVE

Disclosure activity by year

How many themewinter eventin CVEs were published each year.

2024

7

2025

9

Other themewinter products

Browse vulnerabilities for other products by themewinter.

All themewinter vulnerabilities

Frequently asked questions

Common questions about themewinter eventin vulnerabilities.

How many CVEs does themewinter eventin have?

themewinter eventin has 16 published CVE records since 2024.

How many themewinter eventin CVEs are in CISA KEV?

None of themewinter eventin's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for themewinter eventin vulnerabilities?

No themewinter eventin CVEs currently have a tracked public exploit in this dataset.

Which versions of themewinter eventin are affected?

15 distinct themewinter eventin versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in themewinter eventin CVEs?

themewinter eventin's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

How many critical themewinter eventin vulnerabilities are there?

themewinter eventin has 1 critical and 8 high-severity CVEs.

What is the average severity of themewinter eventin CVEs?

The average CVSS base score across themewinter eventin's scored CVEs is 7.0.

References

All themewinter vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track themewinter eventin vulnerabilities

Monitor new themewinter eventin vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References