Yucaerin/CVE-2025-3419

PoC

The Eventin plugin (<= 4.0.26) for WordPress contains an unauthenticated arbitrary file read vulnerability

view exploit source poc_in_githubauthor Yucaerinpublished 2025-06-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-3419US	high7.5	0.73% (54th)	Exploit	2025-05-08
The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.