CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-4796

The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the plugin not properly validating a user's identity or capability prior to updating their details like email in the 'Eventin\Speaker\Api\SpeakerController::update_item' function. This makes it possible for unauthenticated attackers with contributor-level and above permissions to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 16.6%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2025-4796

Themewinter » Eventin » Version: N/A

cpe:2.3:a:themewinter:eventin:-
Themewinter » Eventin » Version: 1.0.0

cpe:2.3:a:themewinter:eventin:1.0.0
Themewinter » Eventin » Version: 1.0.1

cpe:2.3:a:themewinter:eventin:1.0.1
Themewinter » Eventin » Version: 1.0.2

cpe:2.3:a:themewinter:eventin:1.0.2
Themewinter » Eventin » Version: 1.0.3

cpe:2.3:a:themewinter:eventin:1.0.3
Themewinter » Eventin » Version: 1.0.4

cpe:2.3:a:themewinter:eventin:1.0.4
Themewinter » Eventin » Version: 1.1.0

cpe:2.3:a:themewinter:eventin:1.1.0
Themewinter » Eventin » Version: 1.1.1

cpe:2.3:a:themewinter:eventin:1.1.1
Themewinter » Eventin » Version: 1.1.2

cpe:2.3:a:themewinter:eventin:1.1.2
Themewinter » Eventin » Version: 1.1.3

cpe:2.3:a:themewinter:eventin:1.1.3
Themewinter » Eventin » Version: 1.1.4

cpe:2.3:a:themewinter:eventin:1.1.4
Themewinter » Eventin » Version: 1.1.5

cpe:2.3:a:themewinter:eventin:1.1.5
Themewinter » Eventin » Version: 1.1.6

cpe:2.3:a:themewinter:eventin:1.1.6
Themewinter » Eventin » Version: 1.1.7

cpe:2.3:a:themewinter:eventin:1.1.7
Themewinter » Eventin » Version: 1.1.8

cpe:2.3:a:themewinter:eventin:1.1.8
Themewinter » Eventin » Version: 1.1.9

cpe:2.3:a:themewinter:eventin:1.1.9
Themewinter » Eventin » Version: 1.2.0

cpe:2.3:a:themewinter:eventin:1.2.0
Themewinter » Eventin » Version: 2.0.0

cpe:2.3:a:themewinter:eventin:2.0.0
Themewinter » Eventin » Version: 2.0.1

cpe:2.3:a:themewinter:eventin:2.0.1
Themewinter » Eventin » Version: 2.1.0

cpe:2.3:a:themewinter:eventin:2.1.0
Themewinter » Eventin » Version: 2.1.1

cpe:2.3:a:themewinter:eventin:2.1.1
Themewinter » Eventin » Version: 2.1.2

cpe:2.3:a:themewinter:eventin:2.1.2
Themewinter » Eventin » Version: 2.2.0

cpe:2.3:a:themewinter:eventin:2.2.0
Themewinter » Eventin » Version: 2.2.1

cpe:2.3:a:themewinter:eventin:2.2.1
Themewinter » Eventin » Version: 2.3.0

cpe:2.3:a:themewinter:eventin:2.3.0
Themewinter » Eventin » Version: 2.3.1

cpe:2.3:a:themewinter:eventin:2.3.1
Themewinter » Eventin » Version: 2.3.2

cpe:2.3:a:themewinter:eventin:2.3.2
Themewinter » Eventin » Version: 2.3.3

cpe:2.3:a:themewinter:eventin:2.3.3
Themewinter » Eventin » Version: 2.3.4

cpe:2.3:a:themewinter:eventin:2.3.4
Themewinter » Eventin » Version: 2.3.5

cpe:2.3:a:themewinter:eventin:2.3.5
Themewinter » Eventin » Version: 2.3.6

cpe:2.3:a:themewinter:eventin:2.3.6
Themewinter » Eventin » Version: 2.3.7

cpe:2.3:a:themewinter:eventin:2.3.7
Themewinter » Eventin » Version: 2.3.8

cpe:2.3:a:themewinter:eventin:2.3.8
Themewinter » Eventin » Version: 2.3.9

cpe:2.3:a:themewinter:eventin:2.3.9
Themewinter » Eventin » Version: 2.4.0

cpe:2.3:a:themewinter:eventin:2.4.0
Themewinter » Eventin » Version: 2.4.1

cpe:2.3:a:themewinter:eventin:2.4.1
Themewinter » Eventin » Version: 2.4.2

cpe:2.3:a:themewinter:eventin:2.4.2
Themewinter » Eventin » Version: 2.4.3

cpe:2.3:a:themewinter:eventin:2.4.3
Themewinter » Eventin » Version: 2.4.4

cpe:2.3:a:themewinter:eventin:2.4.4
Themewinter » Eventin » Version: 2.4.5

cpe:2.3:a:themewinter:eventin:2.4.5
Themewinter » Eventin » Version: 2.4.6

cpe:2.3:a:themewinter:eventin:2.4.6
Themewinter » Eventin » Version: 2.4.7

cpe:2.3:a:themewinter:eventin:2.4.7
Themewinter » Eventin » Version: 2.4.8

cpe:2.3:a:themewinter:eventin:2.4.8
Themewinter » Eventin » Version: 2.5.0

cpe:2.3:a:themewinter:eventin:2.5.0
Themewinter » Eventin » Version: 2.5.1

cpe:2.3:a:themewinter:eventin:2.5.1
Themewinter » Eventin » Version: 2.5.2

cpe:2.3:a:themewinter:eventin:2.5.2
Themewinter » Eventin » Version: 2.5.3

cpe:2.3:a:themewinter:eventin:2.5.3
Themewinter » Eventin » Version: 2.5.4

cpe:2.3:a:themewinter:eventin:2.5.4
Themewinter » Eventin » Version: 2.5.5

cpe:2.3:a:themewinter:eventin:2.5.5
Themewinter » Eventin » Version: 2.5.6

cpe:2.3:a:themewinter:eventin:2.5.6
Themewinter » Eventin » Version: 2.6.0

cpe:2.3:a:themewinter:eventin:2.6.0
Themewinter » Eventin » Version: 2.6.1

cpe:2.3:a:themewinter:eventin:2.6.1
Themewinter » Eventin » Version: 2.6.2

cpe:2.3:a:themewinter:eventin:2.6.2
Themewinter » Eventin » Version: 2.6.3

cpe:2.3:a:themewinter:eventin:2.6.3
Themewinter » Eventin » Version: 3.0.0

cpe:2.3:a:themewinter:eventin:3.0.0
Themewinter » Eventin » Version: 3.0.1

cpe:2.3:a:themewinter:eventin:3.0.1
Themewinter » Eventin » Version: 3.0.2

cpe:2.3:a:themewinter:eventin:3.0.2
Themewinter » Eventin » Version: 3.0.3

cpe:2.3:a:themewinter:eventin:3.0.3
Themewinter » Eventin » Version: 3.0.4

cpe:2.3:a:themewinter:eventin:3.0.4
Themewinter » Eventin » Version: 3.0.5

cpe:2.3:a:themewinter:eventin:3.0.5
Themewinter » Eventin » Version: 3.0.6

cpe:2.3:a:themewinter:eventin:3.0.6
Themewinter » Eventin » Version: 3.1.0

cpe:2.3:a:themewinter:eventin:3.1.0
Themewinter » Eventin » Version: 3.1.1

cpe:2.3:a:themewinter:eventin:3.1.1
Themewinter » Eventin » Version: 3.1.2

cpe:2.3:a:themewinter:eventin:3.1.2
Themewinter » Eventin » Version: 3.1.3

cpe:2.3:a:themewinter:eventin:3.1.3
Themewinter » Eventin » Version: 3.1.4

cpe:2.3:a:themewinter:eventin:3.1.4
Themewinter » Eventin » Version: 3.1.5

cpe:2.3:a:themewinter:eventin:3.1.5
Themewinter » Eventin » Version: 3.1.6

cpe:2.3:a:themewinter:eventin:3.1.6
Themewinter » Eventin » Version: 3.2.0

cpe:2.3:a:themewinter:eventin:3.2.0
Themewinter » Eventin » Version: 3.2.1

cpe:2.3:a:themewinter:eventin:3.2.1
Themewinter » Eventin » Version: 3.2.2

cpe:2.3:a:themewinter:eventin:3.2.2
Themewinter » Eventin » Version: 3.2.3

cpe:2.3:a:themewinter:eventin:3.2.3
Themewinter » Eventin » Version: 3.3.0

cpe:2.3:a:themewinter:eventin:3.3.0
Themewinter » Eventin » Version: 3.3.1

cpe:2.3:a:themewinter:eventin:3.3.1
Themewinter » Eventin » Version: 3.3.10

cpe:2.3:a:themewinter:eventin:3.3.10
Themewinter » Eventin » Version: 3.3.11

cpe:2.3:a:themewinter:eventin:3.3.11
Themewinter » Eventin » Version: 3.3.12

cpe:2.3:a:themewinter:eventin:3.3.12
Themewinter » Eventin » Version: 3.3.13

cpe:2.3:a:themewinter:eventin:3.3.13
Themewinter » Eventin » Version: 3.3.14

cpe:2.3:a:themewinter:eventin:3.3.14
Themewinter » Eventin » Version: 3.3.15

cpe:2.3:a:themewinter:eventin:3.3.15
Themewinter » Eventin » Version: 3.3.16

cpe:2.3:a:themewinter:eventin:3.3.16
Themewinter » Eventin » Version: 3.3.17

cpe:2.3:a:themewinter:eventin:3.3.17
Themewinter » Eventin » Version: 3.3.18

cpe:2.3:a:themewinter:eventin:3.3.18
Themewinter » Eventin » Version: 3.3.19

cpe:2.3:a:themewinter:eventin:3.3.19
Themewinter » Eventin » Version: 3.3.2

cpe:2.3:a:themewinter:eventin:3.3.2
Themewinter » Eventin » Version: 3.3.20

cpe:2.3:a:themewinter:eventin:3.3.20
Themewinter » Eventin » Version: 3.3.21

cpe:2.3:a:themewinter:eventin:3.3.21
Themewinter » Eventin » Version: 3.3.22

cpe:2.3:a:themewinter:eventin:3.3.22
Themewinter » Eventin » Version: 3.3.23

cpe:2.3:a:themewinter:eventin:3.3.23
Themewinter » Eventin » Version: 3.3.24

cpe:2.3:a:themewinter:eventin:3.3.24
Themewinter » Eventin » Version: 3.3.25

cpe:2.3:a:themewinter:eventin:3.3.25
Themewinter » Eventin » Version: 3.3.26

cpe:2.3:a:themewinter:eventin:3.3.26
Themewinter » Eventin » Version: 3.3.27

cpe:2.3:a:themewinter:eventin:3.3.27
Themewinter » Eventin » Version: 3.3.28

cpe:2.3:a:themewinter:eventin:3.3.28
Themewinter » Eventin » Version: 3.3.29

cpe:2.3:a:themewinter:eventin:3.3.29
Themewinter » Eventin » Version: 3.3.3

cpe:2.3:a:themewinter:eventin:3.3.3
Themewinter » Eventin » Version: 3.3.30

cpe:2.3:a:themewinter:eventin:3.3.30
Themewinter » Eventin » Version: 3.3.31

cpe:2.3:a:themewinter:eventin:3.3.31
Themewinter » Eventin » Version: 3.3.32

cpe:2.3:a:themewinter:eventin:3.3.32
Themewinter » Eventin » Version: 3.3.33

cpe:2.3:a:themewinter:eventin:3.3.33
Themewinter » Eventin » Version: 3.3.34

cpe:2.3:a:themewinter:eventin:3.3.34
Themewinter » Eventin » Version: 3.3.35

cpe:2.3:a:themewinter:eventin:3.3.35
Themewinter » Eventin » Version: 3.3.36

cpe:2.3:a:themewinter:eventin:3.3.36
Themewinter » Eventin » Version: 3.3.37

cpe:2.3:a:themewinter:eventin:3.3.37
Themewinter » Eventin » Version: 3.3.38

cpe:2.3:a:themewinter:eventin:3.3.38
Themewinter » Eventin » Version: 3.3.39

cpe:2.3:a:themewinter:eventin:3.3.39
Themewinter » Eventin » Version: 3.3.4

cpe:2.3:a:themewinter:eventin:3.3.4
Themewinter » Eventin » Version: 3.3.40

cpe:2.3:a:themewinter:eventin:3.3.40
Themewinter » Eventin » Version: 3.3.41

cpe:2.3:a:themewinter:eventin:3.3.41
Themewinter » Eventin » Version: 3.3.42

cpe:2.3:a:themewinter:eventin:3.3.42
Themewinter » Eventin » Version: 3.3.43

cpe:2.3:a:themewinter:eventin:3.3.43
Themewinter » Eventin » Version: 3.3.44

cpe:2.3:a:themewinter:eventin:3.3.44
Themewinter » Eventin » Version: 3.3.45

cpe:2.3:a:themewinter:eventin:3.3.45
Themewinter » Eventin » Version: 3.3.46

cpe:2.3:a:themewinter:eventin:3.3.46
Themewinter » Eventin » Version: 3.3.47

cpe:2.3:a:themewinter:eventin:3.3.47
Themewinter » Eventin » Version: 3.3.48

cpe:2.3:a:themewinter:eventin:3.3.48
Themewinter » Eventin » Version: 3.3.49

cpe:2.3:a:themewinter:eventin:3.3.49
Themewinter » Eventin » Version: 3.3.5

cpe:2.3:a:themewinter:eventin:3.3.5
Themewinter » Eventin » Version: 3.3.50

cpe:2.3:a:themewinter:eventin:3.3.50
Themewinter » Eventin » Version: 3.3.51

cpe:2.3:a:themewinter:eventin:3.3.51
Themewinter » Eventin » Version: 3.3.52

cpe:2.3:a:themewinter:eventin:3.3.52
Themewinter » Eventin » Version: 3.3.53

cpe:2.3:a:themewinter:eventin:3.3.53
Themewinter » Eventin » Version: 3.3.54

cpe:2.3:a:themewinter:eventin:3.3.54
Themewinter » Eventin » Version: 3.3.55

cpe:2.3:a:themewinter:eventin:3.3.55
Themewinter » Eventin » Version: 3.3.56

cpe:2.3:a:themewinter:eventin:3.3.56
Themewinter » Eventin » Version: 3.3.57

cpe:2.3:a:themewinter:eventin:3.3.57
Themewinter » Eventin » Version: 3.3.6

cpe:2.3:a:themewinter:eventin:3.3.6
Themewinter » Eventin » Version: 3.3.7

cpe:2.3:a:themewinter:eventin:3.3.7
Themewinter » Eventin » Version: 3.3.8

cpe:2.3:a:themewinter:eventin:3.3.8
Themewinter » Eventin » Version: 3.3.9

cpe:2.3:a:themewinter:eventin:3.3.9
Themewinter » Eventin » Version: 4.0.0

cpe:2.3:a:themewinter:eventin:4.0.0
Themewinter » Eventin » Version: 4.0.1

cpe:2.3:a:themewinter:eventin:4.0.1
Themewinter » Eventin » Version: 4.0.10

cpe:2.3:a:themewinter:eventin:4.0.10
Themewinter » Eventin » Version: 4.0.11

cpe:2.3:a:themewinter:eventin:4.0.11
Themewinter » Eventin » Version: 4.0.12

cpe:2.3:a:themewinter:eventin:4.0.12
Themewinter » Eventin » Version: 4.0.13

cpe:2.3:a:themewinter:eventin:4.0.13
Themewinter » Eventin » Version: 4.0.14

cpe:2.3:a:themewinter:eventin:4.0.14
Themewinter » Eventin » Version: 4.0.15

cpe:2.3:a:themewinter:eventin:4.0.15
Themewinter » Eventin » Version: 4.0.16

cpe:2.3:a:themewinter:eventin:4.0.16
Themewinter » Eventin » Version: 4.0.17

cpe:2.3:a:themewinter:eventin:4.0.17
Themewinter » Eventin » Version: 4.0.18

cpe:2.3:a:themewinter:eventin:4.0.18
Themewinter » Eventin » Version: 4.0.19

cpe:2.3:a:themewinter:eventin:4.0.19
Themewinter » Eventin » Version: 4.0.2

cpe:2.3:a:themewinter:eventin:4.0.2
Themewinter » Eventin » Version: 4.0.20

cpe:2.3:a:themewinter:eventin:4.0.20
Themewinter » Eventin » Version: 4.0.21

cpe:2.3:a:themewinter:eventin:4.0.21
Themewinter » Eventin » Version: 4.0.22

cpe:2.3:a:themewinter:eventin:4.0.22
Themewinter » Eventin » Version: 4.0.23

cpe:2.3:a:themewinter:eventin:4.0.23
Themewinter » Eventin » Version: 4.0.24

cpe:2.3:a:themewinter:eventin:4.0.24
Themewinter » Eventin » Version: 4.0.25

cpe:2.3:a:themewinter:eventin:4.0.25
Themewinter » Eventin » Version: 4.0.26

cpe:2.3:a:themewinter:eventin:4.0.26
Themewinter » Eventin » Version: 4.0.27

cpe:2.3:a:themewinter:eventin:4.0.27
Themewinter » Eventin » Version: 4.0.28

cpe:2.3:a:themewinter:eventin:4.0.28
Themewinter » Eventin » Version: 4.0.29

cpe:2.3:a:themewinter:eventin:4.0.29
Themewinter » Eventin » Version: 4.0.3

cpe:2.3:a:themewinter:eventin:4.0.3
Themewinter » Eventin » Version: 4.0.30

cpe:2.3:a:themewinter:eventin:4.0.30
Themewinter » Eventin » Version: 4.0.31

cpe:2.3:a:themewinter:eventin:4.0.31
Themewinter » Eventin » Version: 4.0.32

cpe:2.3:a:themewinter:eventin:4.0.32
Themewinter » Eventin » Version: 4.0.33

cpe:2.3:a:themewinter:eventin:4.0.33
Themewinter » Eventin » Version: 4.0.34

cpe:2.3:a:themewinter:eventin:4.0.34
Themewinter » Eventin » Version: 4.0.4

cpe:2.3:a:themewinter:eventin:4.0.4
Themewinter » Eventin » Version: 4.0.5

cpe:2.3:a:themewinter:eventin:4.0.5
Themewinter » Eventin » Version: 4.0.6

cpe:2.3:a:themewinter:eventin:4.0.6
Themewinter » Eventin » Version: 4.0.7

cpe:2.3:a:themewinter:eventin:4.0.7
Themewinter » Eventin » Version: 4.0.8

cpe:2.3:a:themewinter:eventin:4.0.8
Themewinter » Eventin » Version: 4.0.9

cpe:2.3:a:themewinter:eventin:4.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-4796

Products

Pricing

Contact Us