CVE-2025-47539

Severity

CRITICAL

CVSS

9.8

EPSS

0.3307

Risk score

50.77

CISA KEV

PoC

Published

2025-05-23

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2025-28094, GHSA-WQJ4-2VW3-C5JW

Products

arraytics:Eventin 0 ≤4.0.26

Sources

euvd EUVD-2025-28094

Description

Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through <= 4.0.26.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28094
https://patchstack.com/database/Wordpress/Plugin/wp-event-solution/vulnerability/wordpress-eventin-4-0-26-privilege-escalation-vulnerability?_s_id=cve