Known vulnerabilities in WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

Lightweight, scalable and full-featured event listings & management plugin for managing events & tickets from the Frontend and Backend.

11Reported vulnerabilities

9.8Highest CVSS score

3.4.1Latest version

20,000+Active installs

What to do now

Update WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce to 3.1.51 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 22, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-1474	Medium 6.1	0.8%	Before 3.1.28	`3.1.28`	July 11, 2022
CVE-2025-48125	Critical 9.8	0.6%	3.1.51 and earlier	`3.2.0`	May 21, 2025
CVE-2023-4423	Medium 4.8	0.5%	Before 3.1.38	`3.1.38`	September 27, 2023
CVE-2021-24810	Medium 4.8	0.6%	Before 3.1.23	`3.1.23`	March 7, 2022
CVE-2023-47697	High 7.2	0.4%	3.1.42 and earlier	`3.1.43`	November 9, 2023
CVE-2024-0976	Medium 6.1	0.6%	Before 3.1.42	`3.1.42`	March 13, 2024
CVE-2025-2800	Medium 6.1	0.3%	Before 3.1.51	`3.1.51`	July 16, 2025
CVE-2024-2691	Medium 5.4	0.3%	Before 3.1.44	`3.1.44`	July 16, 2024
CVE-2023-49181	Medium 5.5	0.4%	3.1.41 and earlier	`3.1.42`	November 29, 2023
CVE-2025-2799	Medium 4.8	0.2%	Before 3.1.50	`3.1.50`	July 16, 2025
CVE-2025-32225	Medium 4.3	0.5%	3.2.0 and earlier	`3.2.1`	April 4, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.