Events Made Easy

Events Made Easy has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 12 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 5 high. 2026 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (25%). Other recurring categories include SQL Injection, Missing Authorization.

Every one of the 12 issues recorded for Events Made Easy has a vendor fix available, so running the current release closes all known holes.

11 independent researchers contributed these findings, most of them (2) reported by Haitam Lazaar. Events Made Easy is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
7.0/ 10
Patch Coverage100%
Open

0

Fixed

12

Get automatic notifications for all Events Made Easy vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2022-1905

Events Made Easy <= 2.2.80 - SQL Injection

Read the full analysis

Vulnerability Records

12 records
2026-08-20 00:00CVE-2026-28162
7.2
High
sequence_X0Yes
2026-08-19 17:09CVE-2026-75963
7.5
High
Wordfence PRISMYes
2026-07-24 00:00CVE-2026-59557
5.3
Medium
HieuPenguinnnYes
2026-07-13 00:00CVE-2026-14843
5.3
Medium
Haitam LazaarYes
2026-07-07 00:00CVE-2026-14842
5.3
Medium
Haitam LazaarYes
2023-03-20 00:00CVE-2023-28660
8.8
High
Joshua MartinelleYes
2022-12-23 00:00CVE-2023-0404
5.4
Medium
Marco WotschkaYes
2022-05-27 00:00CVE-2022-1905
9.8
Critical
cydaveYes
2021-12-06 00:00CVE-2021-25030
8.8
High
Krzysztof ZającYes
2021-10-04 00:00CVE-2021-24813
5.5
Medium
Huy NguyenYes
Showing 1–10 of 12 reports
Events Made Easy banner
Latestv3.2.17

Events Made Easy

Franky

Author

Franky

4.6(111)
92/100
Last Updated
2026-09-05 (8d ago)
Active Installs
1,000+
Downloads
1,029,433
Requires WP
6.0+
Requires PHP
8.1+
Tested up to
WP 7.1
Created
2011-11-06 (15y ago)

To try it out on your free dummy site, Click here (courtesy of TasteWP) Events Made Easy is a full-featured event and membership management solution for WordPress and ClassicPress. Events Made Easy supports public, private, draft and recurring events, membership and locations management, RSVP (+ optional approval), several payment gateways (Paypal, FirstData, Mollie and others) and OpenStreetMap integration. With Events Made Easy you can plan and publish your event, let people book spaces for your weekly meetings or manage volunteers and memberships. You can add events list, calendars and description to your blog using multiple sidebar widgets or shortcodes; if you are a web designer you can simply employ the placeholders provided by Events Made Easy. Main features: * Public, private, draft and recurring events with custom and dynamic fields in the RSVP form * Allow people to create events from the frontend using a specific shortcode * Membership management with custom and dynamic fields * Volunteer management for events (using event tasks) * Attendance reporting for events and memberships if the rsvp or member qrcode is scanned by someone with enough rights * Page and post content protection through memberships or via shortcodes * Drip content via memberships * People and groups with custom fields per person * PDF creation for membership, bookings and people info * Membership card or booking ticket can be sent as PDF via mail automatically, with optional QR code to scan for attendance/payment info * RSS and ICAL feeds * Calendar management, with holidays integration * Several widgets for event listings and calendar * Location management, with optional OpenStreetMap integration * RSVP bookings with custom fields and dynamic fields, payment tracking, optional approval, discounts * Protection of forms with internal captcha, Google reCaptcha or hCaptcha * Templating for emails, event lists, single events, feeds, RSVP forms, … with specific placeholders for each * Lots of shortcodes and options * Payment gateways: Paypal, FirstData, Mollie, Payconiq, Worldpay, Stripe, Braintree, Instamojo, Mercado Pago, Fondy, SumUp, Opayo * Send emails to registered people, automatically send reminders for payments * Automatically send reminders for memberships that are about to expire or have expired * Mail queueing and newsletter functionality * Mailings can be planned in the future, cancelled … and can include extra attacments * IMAP bounce management * Multi-site compatible * Several GDPR assistance features (request, view and edit personal info via link; delete old records for mailings, attendances, bookings) * Fully localisable and already fully localised in German, Swedish, French and Dutch. Also fully compatible with polylang and qtranslate-xf: most of the settings allow for language tags so you can show your events in different languages to different people. The booking emails also take the choosen language into account. For other multi-lingual plugins, EME provides its own in-text language tags and takes the current chosen language into account. For documentation on all shortcodes and placeholders, visit the Official site .

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C