Events Manager – Calendar, Bookings, Tickets, Appointments and more! vulnerabilities
Plugin slug events-manager · 50 known vulnerabilities · latest disclosed 2026-10-22 · WordPress.org page
1 vulnerability has no fixed version yet. If you use this plugin, consider disabling or replacing it until a fix is released.
9 of 50 rated high or critical (CVSS 7 or more).
Known vulnerabilities in Events Manager – Calendar, Bookings, Tickets, Appointments and more!
| Severity | Affected versions | Fixed in | CVE | Published | Details |
|---|---|---|---|---|---|
| Medium 6.1 | <= 7.4.8 | 7.4.9 | CVE-2026-114694 | 2026-10-22 | Advisory |
| Medium 5.3 | <= 7.4.8 | No fix yet | CVE-2026-42689 | 2026-10-12 | Advisory |
| Medium 6.5 | <= 7.4.6 | 7.4.7 | CVE-2026-42633 | 2026-10-06 | Advisory |
| Medium 5.3 | <= 7.4.5 | 7.4.6 | CVE-2026-105068 | 2026-10-05 | Advisory |
| Medium 4.3 | 7.4.1 to 7.4.4 | 7.4.5 | CVE-2026-93662 | 2026-09-22 | Advisory |
| Medium 4.3 | <= 7.4.4 | 7.4.5 | CVE-2026-93661 | 2026-09-22 | Advisory |
| Medium 5.4 | <= 7.3.3 | 7.3.4 | CVE-2025-14945 | 2026-09-04 | Advisory |
| Medium 6.1 | <= 7.4.0.1 | 7.4.1 | CVE-2026-17089 | 2026-08-24 | Advisory |
| Medium 6.6 | <= 7.3.7.4 | 7.4 | CVE-2026-14280 | 2026-08-24 | Advisory |
| Medium 5.3 | <= 7.4.0 | 7.4.1 | CVE-2026-10627 | 2026-08-24 | Advisory |
| Medium 6.5 | <= 7.4.0 | 7.4.1 | CVE-2026-15023 | 2026-08-24 | Advisory |
| Medium 6.5 | <= 7.4.0 | 7.4.1 | CVE-2026-18057 | 2026-08-10 | Advisory |
| High 7.3 | <= 7.4.0 | 7.4.1 | CVE-2026-18366 | 2026-08-10 | Advisory |
| High 7.2 | <= 7.4.2 | 7.4.3 | CVE-2026-66457 | 2026-08-04 | Advisory |
| Medium 5.3 | <= 7.3 | 7.4 | CVE-2026-18050 | 2026-07-30 | Advisory |
| High 8.1 | <= 7.3.6 | 7.3.7 | CVE-2026-57713 | 2026-07-08 | Advisory |
| High 7.5 | <= 7.3.6 | 7.3.7 | CVE-2026-12987 | 2026-07-01 | Advisory |
| Medium 6.4 | <= 7.2.2.1 | 7.2.3 | CVE-2025-12976 | 2025-12-17 | Advisory |
| Medium 4.3 | <= 7.2.2.2 | 7.2.2.3 | CVE-2025-12407 | 2025-12-11 | Advisory |
| Medium 5.3 | <= 7.2.2.2 | 7.2.2.3 | CVE-2025-12408 | 2025-12-11 | Advisory |
| Medium 6.4 | <= 6.6.4.4, 7.0.1 to 7.0.3 | 6.6.5 | CVE-2025-6976 | 2025-07-09 | Advisory |
| High 7.5 | <= 6.6.4.4, 7.0.1 to 7.0.3 | 6.6.5 | CVE-2025-6970 | 2025-07-09 | Advisory |
| Medium 6.1 | <= 6.6.4.4, 7.0.1 to 7.0.3 | 6.6.5 | CVE-2025-6975 | 2025-07-09 | Advisory |
| Medium 5.3 | <= 6.6.4.1 | 6.6.4.2 | CVE-2025-1249 | 2025-02-26 | Advisory |
| High 7.5 | <= 6.6.3 | 6.6.4 | CVE-2024-11260 | 2025-02-20 | Advisory |
| Medium 6.1 | <= 6.4.8 | 6.4.9 | CVE-2024-5889 | 2024-06-28 | Advisory |
| Medium 6.4 | <= 6.4.7.3 | 6.4.8 | CVE-2024-3492 | 2024-06-11 | Advisory |
| Medium 4.3 | <= 6.4.6.4 | 6.4.7 | CVE-2024-30515 | 2024-03-28 | Advisory |
| Medium 6.4 | <= 6.4.7.1 | 6.4.7.2 | CVE-2024-2111 | 2024-03-27 | Advisory |
| Medium 4.3 | <= 6.4.7.1 | 6.4.7.2 | CVE-2024-2110 | 2024-03-27 | Advisory |
| Medium 4.4 | <= 6.4.6.4 | 6.4.7 | CVE-2024-0614 | 2024-02-28 | Advisory |
| Medium 6.1 | <= 6.4.5 | 6.4.6 | CVE-2023-48326 | 2023-11-23 | Advisory |
| High 7.2 | <= 5.9.7.3 | 5.9.8 | CVE-2020-35012 | 2020-06-07 | Advisory |
| Medium 6.1 | <= 5.9.7.3 | 5.9.8 | CVE-2020-35037 | 2020-06-07 | Advisory |
| High 7.1 | < 5.9.7.2 | 5.9.7.2 | none | 2020-02-06 | Advisory |
| Medium 5.5 | <= 5.9.7.1 | 5.9.7.2 | none | 2020-02-05 | Advisory |
| Medium 6.4 | <= 5.9.5 | 5.9.6 | CVE-2019-16523 | 2019-10-16 | Advisory |
| Medium 4.8 | <= 5.9.4 | 5.9.5 | CVE-2018-13137 | 2018-07-18 | Advisory |
| Medium 5.4 | < 5.9 | 5.9 | CVE-2018-0576 | 2018-04-27 | Advisory |
| Medium 6.4 | < 5.8.1.2 | 5.8.1.2 | CVE-2018-9020 | 2018-03-26 | Advisory |
| Medium 6.1 | < 5.6 | 5.6 | CVE-2015-9297 | 2015-08-10 | Advisory |
| Critical 9.8 | < 5.6 | 5.6 | CVE-2015-9298 | 2015-08-10 | Advisory |
| Medium 6.1 | < 5.5.7.1 | 5.5.7.1 | CVE-2015-9299 | 2015-06-04 | Advisory |
| Medium 6.1 | < 5.5.7 | 5.5.7 | CVE-2015-9300 | 2015-05-23 | Advisory |
| Medium 6.1 | < 5.3.5 | 5.3.5 | CVE-2013-1407 | 2014-08-01 | Advisory |
| Medium 6.1 | < 5.3.9 | 5.3.9 | CVE-2013-7479 | 2014-08-01 | Advisory |
| Medium 6.1 | <= 5.5.1 | 5.5.2 | CVE-2013-7477 | 2014-08-01 | Advisory |
| Medium 6.1 | < 5.5 | 5.5 | CVE-2013-7478 | 2013-08-14 | Advisory |
| Medium 6.1 | <= 5.3.6 | 5.3.6.1 | CVE-2013-7480 | 2013-02-27 | Advisory |
| Medium 6.1 | < 5.1.7 | 5.1.7 | CVE-2012-6716 | 2012-05-22 | Advisory |
Check if a site is affected
Enter a site address to see which version of Events Manager – Calendar, Bookings, Tickets, Appointments and more! and other plugins it runs, and whether they match a known vulnerability.
Questions
Is the Events Manager – Calendar, Bookings, Tickets, Appointments and more! plugin safe to use?
1 known issue(s) have no fix yet, so check the table above before using it.
How do I check which version of Events Manager – Calendar, Bookings, Tickets, Appointments and more! my site runs?
In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.
How do I fix a vulnerable plugin?
Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.