themewinter eventin

Name: themewinter eventin
Brand: themewinter

productUS

cpe:2.3:a:themewinter:eventin:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

1critical5high4medium0low

updated 2026-10-27

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-47539US	—	25.2% (98th)	Exploit	4.0.27	2025-05-23	< 4.0.27
CVE-2025-47445US	critical9.8	5.16% (92nd)	Exploit	4.0.27	2025-05-14	< 4.0.27
CVE-2025-3419US	high7.5	0.73% (54th)	Exploit	4.0.27	2025-05-08	< 4.0.27
CVE-2025-4796US	—	0.62% (49th)	Exploit	4.0.35	2025-08-08	< 4.0.35
CVE-2024-7149US	high8.8	1.03% (63rd)	—	4.0.9	2024-09-27	< 4.0.9
CVE-2025-39584US	—	0.92% (60th)	—	4.0.26	2025-04-16	< 4.0.26
CVE-2025-1770US	—	0.87% (59th)	—	4.0.25	2025-03-20	< 4.0.25
CVE-2025-26964US	high8.8	0.76% (55th)	—	4.0.21	2025-02-25	< 4.0.21
CVE-2023-49756US	high8.8OT elevated	0.59% (48th)	—	3.3.53	2024-12-09	< 3.3.53
CVE-2024-56213US	high8.8	0.57% (47th)	—	4.0.9	2024-12-31	< 4.0.9
CVE-2024-1122US	medium5.3OT elevated	0.47% (41st)	—	3.3.51	2024-02-09	< 3.3.51
CVE-2025-1766US	—OT elevated	0.37% (31st)	—	4.0.25	2025-03-20	< 4.0.25
CVE-2024-6033US	—OT elevated	0.36% (30th)	—	4.0.5	2024-07-17	< 4.0.5
CVE-2024-39648US	medium4.8	0.29% (22nd)	—	4.0.6	2024-08-01	< 4.0.6
CVE-2024-37507US	medium5.4	0.28% (20th)	—	4.0.0	2024-07-21	< 4.0.0
CVE-2025-49321US	medium6.1	0.26% (18th)	—	4.0.29	2025-06-27	< 4.0.29

The flaw types (CWEs) most of these CVEs share.

CWE-862Missing Authorization4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')2 CVEs
CWE-23Relative Path Traversal1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-35Path Traversal: '.../...//'1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.