https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:23:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-289644 EUVD-2026-289644 https://cve.radiocsirt.org/vuln/euvd-2026-289644 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1766 <p>The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the &#39;payment_complete&#39; function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated attackers to update the status of ticket payments to &#39;completed&#39;, possibly resulting in financial loss.</p> <p>The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the &#39;payment_complete&#39; function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated attackers to update the status of ticket payments to &#39;completed&#39;, possibly resulting in financial loss.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-1766 https://cve.radiocsirt.org/vuln/ghsa-64rq-wjgh-hg5p <p>The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the &#39;payment_complete&#39; function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated attackers to update the status of ticket payments to &#39;completed&#39;, possibly resulting in financial loss.</p> <p>The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the &#39;payment_complete&#39; function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated attackers to update the status of ticket payments to &#39;completed&#39;, possibly resulting in financial loss.</p> https://cve.radiocsirt.org/vuln/ghsa-64rq-wjgh-hg5p