Skip to content

Arraytics · product

WP Event SOlution

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerabilityCVE-2026-40776Arraytics · CVSS 7.5 · 0.4% likely

    CWE-862

  2. WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerabilityCVE-2026-28174Arraytics · CVSS 6.5 · 0.4% likely

    CWE-201

  3. WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerabilityCVE-2026-82223Arraytics · CVSS 6.5 · 0.3% likely

    CWE-862

  4. WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerabilityCVE-2026-66451Arraytics · CVSS 6.5 · 0.3% likely

    CWE-288

  5. WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerabilityCVE-2026-28173Arraytics · CVSS 7.1 · 0.3% likely

    CWE-862

  6. WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerabilityCVE-2025-68045Arraytics · CVSS 7.5 · 0.2% likely

    CWE-862

  7. WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerabilityCVE-2026-97300Arraytics · CVSS 6.5 · 0.2% likely

    CWE-799

  8. WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-112844Arraytics · CVSS 7.1 · 0.2% likely

    CWE-79

  9. WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerabilityCVE-2026-105073Arraytics · CVSS 5.3 · 0.2% likely

    CWE-497

  10. WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerabilityCVE-2026-103684Arraytics · CVSS 5.3 · 0.2% likely

    CWE-862

  11. WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerabilityCVE-2026-110380Arraytics · CVSS 5.3 · 0.2% likely

    CWE-862

  12. WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerabilityCVE-2026-109898Arraytics · CVSS 5.3 · 0.2% likely

    CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in