Bandsintown Events

Bandsintown Events has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Bandsintown Events has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Yudha - DJ. Bandsintown Events is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Bandsintown Events vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-13802

Bandsintown Events <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-02-19 21:09	Bandsintown Events <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Bandsintown Events <= 1.3.1	`CVE-2024-13802`	6.4 Medium	Muhammad Yudha - DJ	Yes

Showing 1–1 of 1 reports

Latestv1.4.5

Bandsintown Events

Author

Bandsintown

3.3(8)

66/100

Last Updated

2026-08-26 (17d ago)

Active Installs

4,000+

Downloads

103,976

Requires WP

3.1+

Requires PHP

Tested up to

WP 7.1

Created

2010-03-17 (17y ago)

Use the Bandsintown Events plugin to display your upcoming tour dates on your WordPress site — always up to date, no manual work needed. Set it up once. Every event you add or edit on Bandsintown for Artists appears on your site automatically, with direct ticket links ready to go. Features Event Display & Ticketing Make it easy for fans to find your show dates and buy tickets on your website. Show upcoming tour dates and live events Add customizable “TICKETS” buttons styled to match your website Direct fans to purchase with zero friction Design Customization Match your site’s look and feel with full styling control. Background color, text color, dividers Button styling: color, text, borders, border radius Desktop width control (mobile auto-formats to full width) Localized display in six languages: English, French, Spanish, German, Italian, Portuguese Optional: Grow Your Fan List Add fan engagement calls to action alongside your tour dates. RSVP – Collect fan emails, track interest, send automated reminders Follow – Build your mailing list, automate tour and release announcements Play My City – Let fans request shows, identify high-demand markets Notify Me – Auto-notify fans when tickets go on sale to boost early conversions Presale – Send automated presale codes and alerts via email and mobile Waitlist – Track interest for sold-out or TBA shows, keep fans engaged Notes The plugin will be updated to match the latest version of WordPress.

View on WordPress.org