Radar sectionsPlugins & themes
Check my site

WordPress plugin

Event Espresso – Event Registration & Ticketing Sales security & vulnerabilities

event-espresso-decaf— active installsLast vulnerability Jan 15, 2026

No known unpatched vulnerabilities in the latest version

All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

5Known vulnerabilities
  • Critical0
  • High0
  • Medium5
  • Low0
Vulnerabilities per year
2021: 1 vulnerability1212023: 1 vulnerability1232024: 2 vulnerabilities2242026: 1 vulnerability126

All Event Espresso – Event Registration & Ticketing Sales vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

Event Espresso – Event Registration & Ticketing Sales: common questions

Does Event Espresso – Event Registration & Ticketing Sales have known vulnerabilities?

Yes. VulnCrest Radar lists 5 known vulnerabilities in Event Espresso – Event Registration & Ticketing Sales: 5 medium. None are known to affect version null.

How do I check which version of Event Espresso – Event Registration & Ticketing Sales I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Event Espresso – Event Registration & Ticketing Sales vulnerability?

CVE-2025-68007, published Jan 15, 2026: Event Espresso 4 Decaf <= 5.0.37.decaf - Missing Authorization to Unauthenticated Settings Change. Severity: Medium (CVSS 6.5).

Is any Event Espresso – Event Registration & Ticketing Sales vulnerability listed in CISA KEV?

No. None of the known Event Espresso – Event Registration & Ticketing Sales vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?