Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Event Booking Manager for WooCommerce — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Event Booking Manager for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: magepeopleteam

CVE ID Title CVSS Severity Published
CVE-2026-91077 Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_list - - 2026-09-23
CVE-2026-91019 Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure - - 2026-09-17
CVE-2026-91008 Event Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation Panel - - 2026-09-17
CVE-2026-16064 Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event - - 2026-08-02
CVE-2026-16062 Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content - - 2026-08-02
CVE-2026-16063 Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content - - 2026-08-02
CVE-2025-5568 WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-06-07

All 7 known CVE vulnerabilities affecting Event Booking Manager for WooCommerce with full Chinese analysis, references, and POCs where available.