https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:28:45.418301+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-1766 CVE-2025-1766 — Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated P… 2026-10-07T20:28:45.435340+00:00

Affected: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'payment_complete' function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated attackers to update the status of ticket payments to 'completed', possibly resulting in financial loss.