Thimpress Wp Events Manager vulnerabilities

2 CVEs affecting Thimpress Wp Events Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-57987, published 2025-09-22.

More from Thimpress.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-7717, published 2024-08-31. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 2.1.11 due to insufficient escaping on the user…
• CVE-2025-57987, published 2025-09-22. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Missing Authorization vulnerability in ThimPress WP Events Manager wp-events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Events Manager: from…