Log in / Sign up

Vulnerability details

CVE-2025-4796

Arraytics Eventin – Event Calendar

Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover

CVSS 3.1
8.8High

Official description

The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the plugin not properly validating a user's identity or capability prior to updating their details like email in the 'Eventin\Speaker\Api\SpeakerController::update_item' function. This makes it possible for unauthenticated attackers with contributor-level and above permissions to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.

CVSS scores

ScoreVersionSourceVector
8.8High 3.1 CVEProject cvelistV5 (CNA) (Wordfence) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) v ≤ 4.0.34 CVEProject cvelistV5 (CNA)

References and advisories

3
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-08-08
Last updated
2026-04-08
State
Published
Assigner (CNA)
Wordfence

Exploit prediction (EPSS)

0.65%
Probability of exploitation in 30 days
51.5%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-639
    Authorization Bypass Through User-Controlled Key