Filtered by vendor Eventin
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-13178 | 2 Eventin, Wordpress | 2 Eventin, Wordpress | 2026-07-30 | N/A |
| The Eventin WordPress plugin before 4.1.16 does not properly authorize order creation and accepts an attacker-supplied order status, allowing unauthenticated users to create orders marked as paid without completing any payment. | ||||
Page 1 of 1.