WP Events Manager

WP Events Manager has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include SQL Injection.

Every one of the 3 issues recorded for WP Events Manager has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. WP Events Manager is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Events Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2024-7717

WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection

Read the full analysis

Vulnerability Records

3 records


2026-08-03 00:00	Events Manager <= 2.2.4 - Authenticated (Subscriber+) Payment Bypass WP Events Manager <= 2.2.4	`CVE-2026-14205`	4.3 Medium	Mustafa Ahmed	Yes
2025-09-22 00:00	WP Events Manager <= 2.2.1 - Missing Authorization WP Events Manager <= 2.2.1	`CVE-2025-57987`	6.5 Medium	Que Thanh Tuan - Blue Rock	Yes
2024-08-30 19:50	WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection WP Events Manager <= 2.1.11	`CVE-2024-7717`	8.8 High	Arkadiusz Hydzik	Yes

Showing 1–3 of 3 reports

Latestv2.2.5

WP Events Manager

Author

ThimPress

2.7(13)

54/100

Last Updated

2026-08-22 (22d ago)

Active Installs

30,000+

Downloads

733,009

Requires WP

6.0+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2017-03-21 (10y ago)

What is WP Events Manager? WP Events Manager is a powerful Events Manager plugin with all of the most important features of an Event Website. It helps you easier manage all of your events and even help you sell your tickets online. What can WP Events Manager do? Set up events with: Quantity (number of tickets) Ticket Price Start date / End date Location (Google Map Integration) ShortCode – to embed into other posts, other places on your site. Featured Event Image, Event Category – Easily group and manage events Manage Users : Who join what event Currency manage: You can choose the currency of your own with Thousand separator, decimal separators and more. Send notify when user register events, send notification when user register accounts, … Payment/Checkout option: Checkout with Paypal Set up Cancel Payment status Limit number of times people register WordPress Themes for Events To best use this theme, we suggest you use premium high quality themes made by ThimPress: Best Education WordPress Theme Best Theme for Coach, Mentor, Selling courses Best Hotel WordPress Theme Connect with us To stay in touch and update about FundPress’s future releases and features, you can connect with us via: – Facebook – Twitter – Website. On this website, we even have an exclusive support section for premium products. But we always want to help, so feel free to ask.

View on WordPress.org