WooEvents - Calendar and Event Booking

WooEvents - Calendar and Event Booking has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include Path Traversal.

Every one of the 2 issues recorded for WooEvents - Calendar and Event Booking has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WooEvents - Calendar and Event Booking vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.1CVE-2024-8671

WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite

Read the full analysis

Vulnerability Records

2 records


2025-09-26 00:00	WooEvents <= 4.1.7 - Missing Authorization WooEvents - Calendar and Event Booking <= 4.1.7	`CVE-2025-60121`	5.3 Medium	Bonds	Yes
2024-09-23 00:00	WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite WooEvents - Calendar and Event Booking <= 4.1.2	`CVE-2024-8671`	9.1 Critical	Tonn	Yes

Showing 1–2 of 2 reports