Awesome Event Booking
Awesome Event Booking has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.
Every one of the 4 issues recorded for Awesome Event Booking has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (2) reported by Kévin Mosbahi (Mika). Awesome Event Booking is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-31416Awesome Event Booking <= 2.8.4 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Awesome Event Booking
Author
AwesomeTOGI
A powerful and FREE event management plugin for WordPress You can now easily create events, accept bookings and manage these with the powerful Awesome Event Booking plugin. Main features: Create events with date, time, price, max attendants, location and region. Nice display of the events via dropdown. Fully responsive view. QuickSimple booking form. Manage bookings via backend. Bulk move bookings from one event to another. A wide range of extensions available. Flexible display of the events Categorize the events and display the events on pages by category, region and date using our shortcode tool. Re-use venues and organizers You will probably be using the same venues and event organizers over and over again, so we have made sure, that once you have created these, they can be re-used for future events. Fully Responsive The events are nicely displayed on both desktops, laptops, tablets and smartphones. Each view is fully responsive, making sure that visitors can book your events from anywhere. Our Cool extensions: See all of our cool extensions here. Payment integration via Woocommerce Duplicate event add-on Mailchimp integration Several event dates add-on Downloadable info add-on Diploma add-on
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C