EventPress

EventPress has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 2 are fixed as of August 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for EventPress has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. EventPress is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all EventPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2026-6268

EventPress < 22.2 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2026-06-11 00:00	EventPress < 22.2 - Reflected Cross-Site Scripting EventPress < 22.2	`CVE-2026-6268`	6.1 Medium	N/A	Yes
2022-02-14 00:00	Multiple Themes (Various Versions) - Reflected Cross-Site Scripting EventPress <= 5.6	`N/A`	6.1 Medium	WPScanTeam	Yes

Showing 1–2 of 2 reports

Latestv24.0

EventPress

Author

Nayra Themes

5.0(2)

100/100

Last Updated

2026-08-13 (2d ago)

Active Installs

400+

Downloads

276,421

Requires WP

4.7+

Requires PHP

7.4+

Created

2019-12-02 (7y ago)

EventPress WordPress theme has a professional and sleek design that is ideal for creating websites for various types of events. Whether you are planning a conference, seminar, workshop, or any other event, this theme has everything you need to make your website stand out and attract attendees. View the demo of EventPress Pro https://www.nayrathemes.com/demo/pro/?theme=eventpress