CVE

CVE-2026-13177 — Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce [wp-event-solution] < 4.1.20

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-13177 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce [wp-event-solution] < 4.1.20 Authorization Bypass Through User-Controlled Key Unknown < 4.1.20 4.1.20 2026-08-12

CVE-2026-13177

The Eventin plugin for WordPress, in versions up to 4.1.20, contains a vulnerability that allows authorized attackers with contributor-level access or higher to access sensitive user and configuration information.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.