This is the second round of releases from our Security Hunt. Please update Events Manager to 7.4.13, Events Manager Pro to 3.9.9 and our Stripe gateway to 2.5.3 as soon as you can. The hunt has turned up 13 more confirmed issues since our last update, and these releases fix all of them. We’re keeping […]
This is a follow-up security release for the free plugin. Please update as soon as you can. Yesterday’s 7.4.11 closed an unauthenticated information disclosure, and as we released a separate hunter found a related path it did not cover. 7.4.12 closes it on both of those endpoints. That is the hunt working as intended, a […]
Two add-ons also have security updates from the Security Hunt. For the background, see our main release post. The Stripe one matters most: a single paid Stripe PaymentIntent could approve more than one booking. If you take payments through the Stripe Elements gateway, update to Events Manager Pro – Stripe 2.5.2. Events Manager – Connect […]
These are security releases for the free plugin and Pro. Please update as soon as you can. Last week we opened the Security Hunt, asking you to point your own AI at Events Manager and report what it finds before anyone else does. It is working: in the first few days, three people reported nine […]
We’ve decided to do something a little out there… Everyone has an AI that can read code now (among other dangerous things), and plenty of people are pointing theirs at WordPress plugins, ours very much included. So we’re making it official. From today until November 30, we want you to point yours at Events Manager […]
This update fixes another round of security issues of varying severity. We recommend updating now. We apologize for the repeated warnings and what may feel like a new security update every other day. With AI tooling now in everyone’s hands, and our code being open source, the plugin is being scrutinized more closely than ever […]
We’ve received reports of a recently disclosed SQL injection vulnerability in Events Manager, and have released version 7.4.7 with a fix within 24 hours. This is a serious vulnerability that has gone undetected since version 7.3, so if your site is running anything from 7.3 to 7.4.6, please update as soon as you can. What […]
Events Manager 7.4.6 and Events Manager Pro 3.9.4 are out now. These are minor releases with various bug fixes, and the full changelogs are below. Events Manager 7.4.6 Events Manager Pro 3.9.4
It’s been a busy few weeks. Events Manager 7.4.4 and 7.4.5 are both out now, along with Pro 3.9.2 and 3.9.3, and if you haven’t updated yet then today’s a good day to. Between the two core releases we’ve patched up a few more security vulnerabilities. All of them were responsibly disclosed and all of […]
Events Manager 7.4.3 is out now and we recommend updating today. It fixes the vulnerabilityreported as CVE-2026-66457, and carries a handful of bug fixes reported through our support forums. It is reflected XSS, not stored, and the difference matters more than it might sound. This releasealso clears up some confusion around 7.4.2, and we would […]