CVE-2025-2800

Name of the Vulnerable Software and Affected Versions WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions prior to 3.1.50

Description The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting through the organizer name parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts into pages. These scripts will execute when a user accesses an injected page.

Recommendations Update WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce to version 3.1.50 or later.