WordPress Vulnerability Scanner WPSec
Vulnerabilities / WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce vulnerabilities

Advisories WPSec published for WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce. Other sources may list more. Its attack surface: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-11-03 WPSEC-2026-2207 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.4.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Organizer and Venue Takeover via 'event_organizer_ids' and 'event_venue_ids' Medium 5.4 3.4.2
2026-11-03 WPSEC-2026-2206 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.4.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary Post Read and Overwrite via 'event_id' Medium 6.5 3.4.2

License: CC BY 4.0