CVE-2025-47445

7.5

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.26.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

eventin

Updated Nov 10, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

WordPress Eventin (Themewinter) 4.0.26 - Arbitrary File Download

Themewinter Eventin contains a path traversal caused by relative path manipulation, letting attackers access arbitrary files on the server, exploit requires no specific privileges or user interaction. References: https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-eventin-4-0-26-arbitrary-file-download-vulnerability?_s_id=cve https://github.com/advisories/GHSA-c3pr-284f-8x9f https://nvd.nist.gov/vuln/detail/CVE-2025-47445 Remediation: Update to the latest version of Eventin, version 4.0.27 or later.

10 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: eventin

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →