https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:04:20.599804+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-3419 CVE-2025-3419 — Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read 2026-10-03T23:04:20.622358+00:00

Affected: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the proxy_image() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. CVE-2025-47445 is a duplicate of this vulnerability.