CVE Database /
CVE-2025-1249
CVE · Medium
CVE-2025-1249 — Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 6.6.4.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-1249
|
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 6.6.4.2 |
Missing Authorization |
Medium
5.3
|
< 6.6.4.2
|
6.6.4.2 |
2025-02-26 |
—
|
CVE-2025-1249
The Events Manager plugin for WordPress suffers from a security weakness that allows unauthorized individuals to bypass certain access controls due to the absence of proper capability checks in all versions prior to 6.6.4.2, including version 6.6.4.1. This vulnerability enables unauthenticated attackers to execute an action without permission.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings