WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Events Manager – Calendar, Bookings, Tickets, and more!

Events calendar with bookings, scheduling, appointments, event registration, tickets, recurring events, and venue management.

43Reported vulnerabilities
9.8Highest CVSS score
7.4.2Latest version
70,000+Active installs

What to do now

Update Events Manager – Calendar, Bookings, Tickets, and more! to 7.3.4 or later. 42 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 7, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2025-6970 High 7.5 61.9% Before 6.6.5
7.0.1 up to (but not including) 7.0.4
6.6.5 July 9, 2025
CVE-2020-35012 High 7.2 1.5% Before 5.9.8 5.9.8 December 1, 2021
CVE-2015-9298 Critical 9.8 2.1% Before 5.6 5.6 August 13, 2019
CVE-2020-35037 Medium 6.1 0.9% Before 5.9.8 5.9.8 December 1, 2021
CVE-2019-16523 Medium 5.4 1.2% 5.9.5 and earlier 5.9.6 October 16, 2019
CVE-2018-9020 Medium 5.4 1.0% Before 5.8.1.2 5.8.1.2 March 26, 2018
CVE-2018-13137 Medium 4.8 1.2% 5.9.4 to 5.9.4 (inclusive) 5.9.5 April 12, 2019
CVE-2013-1407 Medium 4.3 2.1% 5.3.4 and earlier
5.3 to 5.3 (inclusive)
5.3.1 to 5.3.1 (inclusive)
5.3.2 to 5.3.2 (inclusive)
5.3.2.1 to 5.3.2.1 (inclusive)
5.3.3 to 5.3.3 (inclusive)
2.2.7 and earlier
2.2 to 2.2 (inclusive)
2.2.1 to 2.2.1 (inclusive)
2.2.2 to 2.2.2 (inclusive)
2.2.3 to 2.2.3 (inclusive)
2.2.4 to 2.2.4 (inclusive)
2.2.5 to 2.2.5 (inclusive)
2.2.6 to 2.2.6 (inclusive)
2.2.8 to 2.2.8 (inclusive)
2.2.9 May 13, 2014
CVE-2024-0614 Medium 4.8 0.7% Before 6.4.7 6.4.7 March 13, 2024
CVE-2026-57713 High 8.1 0.5% 7.3.6 and earlier 7.3.7 July 8, 2026
CVE-2024-11260 High 7.5 0.6% Before 6.6.4 6.6.4 February 21, 2025
CVE-2026-12987 High 7.5 0.5% 7.3.6 and earlier 7.3.7 July 1, 2026
CVE-2026-18366 High 7.3 0.4% 7.4.0 and earlier 7.4.1 August 10, 2026
CVE-2026-66457 High 7.2 0.2% 7.4.2 and earlier August 4, 2026
CVE-2026-14280 Medium 6.6 0.7% 0 to 7.3.7.4 (inclusive) 7.4 August 25, 2026
CVE-2026-15023 Medium 6.5 0.4% 0 to 7.4.0 (inclusive) 7.4.1 August 25, 2026
CVE-2026-18057 Medium 6.5 0.2% 7.4.0 and earlier 7.4.1 August 10, 2026
CVE-2025-12976 Medium 6.4 0.4% 0 to 7.2.2.1 (inclusive) 7.2.3 December 18, 2025
CVE-2013-7480 Medium 6.1 0.9% Before 5.3.6.1 5.3.6.1 August 22, 2019
CVE-2013-7479 Medium 6.1 0.9% Before 5.3.9 5.3.9 August 22, 2019
CVE-2013-7478 Medium 6.1 0.9% Before 5.5 5.5 August 22, 2019
CVE-2013-7477 Medium 6.1 0.9% Before 5.5.2 5.5.2 August 22, 2019
CVE-2012-6716 Medium 6.1 0.9% Before 5.1.7 5.1.7 August 22, 2019
CVE-2015-9300 Medium 6.1 0.9% Before 5.5.7 5.5.7 August 13, 2019
CVE-2015-9299 Medium 6.1 0.9% Before 5.5.7.1 5.5.7.1 August 13, 2019
CVE-2015-9297 Medium 6.1 0.9% Before 5.6 5.6 August 13, 2019
CVE-2026-17089 Medium 6.1 0.3% 0 to 7.4.0.1 (inclusive) 7.4.1 August 25, 2026
CVE-2025-6975 Medium 6.1 0.3% Before 6.6.5
7.0.1 up to (but not including) 7.0.4
6.6.5 July 9, 2025
CVE-2024-5889 Medium 6.1 0.3% Before 6.4.9 6.4.9 June 29, 2024
CVE-2023-48326 Medium 6.1 0.4% 6.4.5 and earlier 6.4.6 November 23, 2023
CVE-2018-0576 Medium 5.4 1.5% Before 5.9 5.9 May 14, 2018
CVE-2024-3492 Medium 5.4 0.3% Before 6.4.8 6.4.8 June 12, 2024
CVE-2024-2111 Medium 5.4 0.3% Before 6.4.7.2 6.4.7.2 March 28, 2024
WF-156e64f2-87a4-40a0-bac8-3dc1f702b0a1 Medium 5.5 5.9.7.1 and earlier 5.9.7.2 February 5, 2020
CVE-2025-14945 Medium 5.4 0.2% 0 to 7.3.3 (inclusive) 7.3.4 September 5, 2026
CVE-2026-10627 Medium 5.3 0.3% 0 to 7.4.0 (inclusive) 7.4.1 August 25, 2026
CVE-2026-18050 Medium 5.3 0.3% 7.3 and earlier 7.4 July 30, 2026
CVE-2025-12408 Medium 5.3 0.3% 0 to 7.2.2.2 (inclusive) 7.2.2.3 December 12, 2025
CVE-2025-6976 Medium 5.4 0.2% Before 6.6.5
7.0.1 up to (but not including) 7.0.4
6.6.5 July 9, 2025
CVE-2025-1249 Medium 5.3 0.3% 6.6.4.1 and earlier 6.6.4.2 February 26, 2025
CVE-2025-12407 Medium 4.3 0.1% 0 to 7.2.2.2 (inclusive) 7.2.2.3 December 12, 2025
CVE-2024-2110 Medium 4.3 0.2% Before 6.4.7.2 6.4.7.2 March 28, 2024
CVE-2024-30515 Medium 4.3 0.3% 6.4.6.4 and earlier 6.4.7 March 28, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.