PT-2025-21149 · Themewinter · Eventin

Astra.R3Verii · Published 2025-05-14 · Updated 2025-12-04 · CVE-2025-47445

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Eventin versions n/a through 4.0.26

Description: The issue affects Themewinter Eventin, allowing Relative Path Traversal. This enables Path Traversal, which can be exploited.

Recommendations: For versions n/a through 4.0.26, update to a version later than 4.0.26 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2025-47445

Affected Products

Eventin

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-47445 · Security Note
• https://osv.dev/vulnerability/CVE-2025-47445 · Vendor Advisory
• https://t.me/cvetracker/23826 · Telegram Post
• https://twitter.com/CVEnew/status/1922695643530920027 · Twitter Post
• https://twitter.com/cracbot/status/1924419850341961793 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-eventin-4-0-26-arbitrary-file-download-vulnerability?_s_id=cve · Note
• https://twitter.com/pdnuclei_bot/status/1996519883585225163 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/wp-event-solution/vulnerability/wordpress-eventin-4-0-26-arbitrary-file-download-vulnerability?_s_id=cve · Note
• https://t.me/cveNotify/131765 · Telegram Post
• https://t.me/cvenotify/122106 · Telegram Post