WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar

Sell event tickets with WooCommerce. Event registration, recurring events, RSVP, attendee management & event calendar — free.

27Reported vulnerabilities
9.9Highest CVSS score
5.5.0Latest version
7,000+Active installs

What to do now

Update Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar to 5.6.0 or later. 27 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 18, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-43138 Critical 9.9 0.6% 4.2.1 and earlier 4.2.2 August 7, 2024
CVE-2025-30895 High 8.8 0.8% 4.2.9 and earlier 4.3.0 March 27, 2025
CVE-2025-32145 High 8.8 0.5% 4.3.6 and earlier 4.3.7 April 8, 2025
CVE-2024-24796 High 8.8 0.5% Before 4.1.2 4.1.2 February 12, 2024
CVE-2026-23549 High 8.1 0.4% 5.1.1 and earlier 5.1.2 February 18, 2026
CVE-2026-16062 High 7.5 0.3% Before 5.3.7 5.3.7 August 2, 2026
CVE-2026-24954 High 7.5 0.4% 5.0.8 and earlier 5.0.9 December 25, 2025
CVE-2025-54742 High 7.5 0.4% 4.4.8 and earlier 4.4.9 August 27, 2025
WF-c63079af-6a22-4692-ab81-96e166a00c38 Medium 6.5 — Before 3.5.3 3.5.3 November 3, 2021
CVE-2026-16063 Medium 6.4 0.1% 5.3.6 and earlier 5.3.7 July 22, 2026
CVE-2024-49703 Medium 6.4 0.2% 4.2.5 and earlier 4.2.6 October 21, 2024
CVE-2026-25361 Medium 6.1 0.2% 5.1.4 and earlier 5.1.5 March 20, 2026
CVE-2026-45441 Medium 5.3 0.3% 5.3.3 and earlier 5.3.4 May 26, 2026
CVE-2025-66083 Medium 5.3 0.3% 5.0.4 and earlier 5.0.5 December 4, 2025
CVE-2025-66082 Medium 5.3 0.3% 5.0.4 and earlier 5.0.5 November 30, 2025
CVE-2025-5568 Medium 5.4 0.2% Before 4.4.3 4.4.3 June 7, 2025
CVE-2025-30887 Medium 5.3 0.4% 4.2.9 and earlier 4.3.0 March 27, 2025
WF-ef7ef45a-612b-40ca-817d-05b3d29b2b05 Medium 5.3 — Before 3.5.3 3.5.3 November 3, 2021
CVE-2023-28422 Medium 4.4 0.4% 3.8.6 and earlier 3.8.7 March 20, 2023
CVE-2026-81759 Medium 4.3 0.2% 5.5.0 and earlier 5.6.0 August 27, 2026
CVE-2026-81761 Medium 4.3 0.2% 5.5.0 and earlier 5.6.0 August 27, 2026
CVE-2026-16064 Medium 4.3 0.1% Before 5.3.7 5.3.7 August 2, 2026
CVE-2026-17166 Medium 4.3 0.2% 0 to 5.3.7 (inclusive) 5.3.8 July 29, 2026
CVE-2026-32354 Medium 4.3 0.3% Before 5.1.9 5.1.9 February 14, 2026
CVE-2026-24942 Medium 4.3 0.1% 5.1.1 and earlier 5.1.2 December 6, 2025
CVE-2025-54705 Medium 4.3 0.3% 4.4.6 and earlier 4.4.7 July 30, 2025
CVE-2022-47164 Medium 4.3 0.3% 3.7.7 and earlier 3.7.8 March 16, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.