Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

80 Quality Score

Active Installs

18/30

With 10,000 active installs and a 60/30 popularity score, Eventin has a solid but not dominant footprint in a crowded events category.

Update Freshness

25/25

A perfect 100/25 maintenance score reflects the July 2026 update and the policy of keeping the plugin current with the latest WordPress releases.

User Rating

14/15

The 92/100 user rating from 391 reviews is strong and signals genuine satisfaction among actual users, not just casual star-givers.

Support Health

8/15

Support threads are limited at only 7 total, but the 100% resolution rate is encouraging, though the small sample size keeps the score at 50/15.

WP Compatibility

15/15

A perfect 100/15 compatibility score confirms clean operation with WordPress 7.0.1 while still supporting sites on 6.2 and PHP 7.4.

Scores higher than 75% of indexed plugins

About

Events calendar plugin for event registration, event tickets, bookings, RSVP, recurring and virtual events with WooCommerce and Zoom (AI-powered).

Active Installs 10k+

Rating ★★★★½ 4.7/5

Last Updated 2026-09-24 5:41pm GMT

Requires WordPress 6.2+

Tested Up To 7.0.6

Requires PHP 7.4+

Security History

52 known vulnerabilities, all patched

1 Critical 14 High 37 Medium

Most recent: September 14, 2026

View details ▸

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter High

September 14, 2026 Patched in ["4.1.24"] CVE-2026-75983

Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter Medium

September 14, 2026 Patched in ["4.1.24"] CVE-2026-15402

Eventin <= 4.1.23 - Missing Authorization Medium

September 14, 2026 Patched in ["4.1.24"] CVE-2026-84907

Eventin <= 4.1.23 - Missing Authorization Medium

September 14, 2026 Patched in ["4.1.24"] CVE-2026-84905

Eventin <= 4.1.23 - Missing Authorization Medium

September 14, 2026 Patched in ["4.1.24"] CVE-2026-77702

Eventin <= 4.1.23 - Unauthenticated Payment Bypass Medium

September 14, 2026 Patched in ["4.1.24"] CVE-2026-84906

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption Medium

September 8, 2026 Patched in ["4.1.23"] CVE-2026-15398

Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint Medium

September 8, 2026 Patched in ["4.1.18"] CVE-2026-11821

Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter High

September 8, 2026 Patched in ["4.1.23"] CVE-2026-15667

Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter High

September 8, 2026 Patched in ["4.1.23"] CVE-2026-15406

Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter Medium

September 8, 2026 Patched in ["4.1.23"] CVE-2026-12956

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.21 - Authenticated (Contributor+) Path Traversal Medium

September 5, 2026 Patched in ["4.1.21"] CVE-2026-84898

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Missing Authorization Medium

September 5, 2026 Patched in ["4.1.22"] CVE-2026-84901

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.22 - Missing Authorization Medium

September 1, 2026 Patched in ["4.1.23"] CVE-2026-82223

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Unauthenticated Information Exposure Medium

August 26, 2026 Patched in ["4.1.22"] CVE-2026-13172

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.19 - Unauthenticated Order Completion Medium

August 24, 2026 Patched in ["4.1.19"] CVE-2026-77694

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.21 - Authenticated (Contributor+) Server-Side Request Forgery Medium

August 24, 2026 Patched in ["4.1.21"] CVE-2026-13176

Eventin <= 4.1.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Schedule Deletion and Modification Medium

August 17, 2026 Patched in ["4.1.21"] CVE-2026-13175

Eventin <= 4.1.20 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Event Modification, Deletion and Ownership Takeover Medium

August 17, 2026 Patched in ["4.1.21"] CVE-2026-13169

Eventin <= 4.1.20 - Missing Authorization Medium

August 17, 2026 Patched in ["4.1.21"] CVE-2026-13173

Eventin <= 4.1.20 - Authenticated (Contributor+) Insecure Direct Object Reference to Speaker Account Deletion Medium

August 17, 2026 Patched in ["4.1.21"] CVE-2026-13174

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Authenticated (Contributor+) Information Exposure Medium

August 13, 2026 Patched in ["4.1.20"] CVE-2026-13168

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Authenticated (Contributor+) Information Exposure Medium

August 13, 2026 Patched in ["4.1.20"] CVE-2026-13177

Event SOlution <= 4.1.18 - Authenticated (Customer+) Information Exposure Medium

August 13, 2026 Patched in ["4.1.19"] CVE-2026-28174

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.19 - Authenticated (Customer+) Arbitrary Content Deletion Medium

August 13, 2026 Patched in ["4.1.20"] CVE-2026-28173

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Unauthenticated User Account Creation Medium

August 10, 2026 Patched in ["4.1.20"] CVE-2026-13171

Eventin <= 4.1.19 - Authenticated (Editor+) Local File Inclusion Medium

August 6, 2026 Patched in ["4.1.20"] CVE-2026-13170

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.9 - Missing Authorization Medium

August 5, 2026 Patched in ["4.1.10"] CVE-2026-66451

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.16 - Unauthenticated Payment Bypass Medium

August 4, 2026 Patched in ["4.1.16"] CVE-2026-13178

Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter Medium

July 9, 2026 Patched in ["4.1.16"] CVE-2026-12924

Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API Medium

July 9, 2026 Patched in ["4.1.16"] CVE-2026-13039

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.12 - Missing Authorization Medium

June 15, 2026 Patched in ["4.1.13"] CVE-2025-68045

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.8 - Missing Authorization Medium

April 29, 2026 Patched in ["4.1.9"] CVE-2026-40776

Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure Medium

April 13, 2026 Patched in ["4.1.9"] CVE-2026-4109

Eventin <= 4.1.3 - Authenticated (Contributor+) PHP Object Injection High

January 22, 2026 Patched in ["4.1.4"] CVE-2025-68047

Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings' High

January 8, 2026 Patched in ["4.0.52"] CVE-2025-14657

Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery High

August 22, 2025 Patched in ["4.0.38"] CVE-2025-7813

Eventin <= 4.0.31 - Authenticated (Contributor+) PHP Object Injection High

August 13, 2025 Patched in ["4.0.32"] CVE-2025-49869

Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover High

August 8, 2025 Patched in ["4.0.35"] CVE-2025-4796

Eventin <= 4.0.28 - Reflected Cross-Site Scripting Medium

June 23, 2025 Patched in ["4.0.29"] CVE-2025-49321

Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read High

May 7, 2025 Patched in ["4.0.27"] CVE-2025-3419

Eventin <= 4.0.26 - Missing Authorization to Unauthenticated Privilege Escalation Critical

May 7, 2025 Patched in ["4.0.27"] CVE-2025-47539

Eventin <= 4.0.25 - Authenticated (Contributor+) Local File Inclusion High

April 16, 2025 Patched in ["4.0.26"] CVE-2025-39584

Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion High

March 19, 2025 Patched in ["4.0.25"] CVE-2025-1770

Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update Medium

March 19, 2025 Patched in ["4.0.25"] CVE-2025-1766

Eventin <= 4.0.20 - Authenticated (Contributor+) Local File Inclusion High

February 23, 2025 Patched in ["4.0.21"] CVE-2025-26964

Eventin <= 4.0.7 - Authenticated (Contributor+) Local File Inclusion High

December 19, 2024 Patched in ["4.0.9"] CVE-2024-56213

Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion High

September 26, 2024 Patched in ["4.0.9"] CVE-2024-7149

Eventin <= 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting Medium

August 1, 2024 Patched in ["4.0.6"] CVE-2024-39648

Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import Medium

July 16, 2024 Patched in ["4.0.5"] CVE-2024-6033

Eventin <= 3.3.57 - Authenticated (Author+) Stored Cross-Site Scripting Medium

July 4, 2024 Patched in ["4.0.0"] CVE-2024-37507

Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export Medium

February 8, 2024 Patched in ["3.3.51"] CVE-2024-1122

What It Does

Eventin turns a WordPress site into a full event management hub, letting you publish events on a calendar, accept registrations, sell tickets, and run both in-person and virtual sessions from the same dashboard. The AI features help automate event creation, content suggestions, and scheduling tasks. It bundles ticketing, RSVP, and booking workflows without requiring WooCommerce as a dependency.

Who It's For

This plugin fits small to mid-sized organizations that run recurring events, like conference organizers, meetup groups, training companies, and community associations that want one tool to handle listings, ticket sales, and attendee management. It is also useful for virtual event hosts who need built-in online session support rather than a third-party Zoom integration layer.

Who Should Skip It

If you already run a WooCommerce store and only need basic ticket add-ons, the lighter Event Tickets and Registration plugin or the WooCommerce-focused mage-eventpress will be a better fit with less overlap. Sites needing very high attendee throughput or complex seat-level venue mapping should look at dedicated ticketing platforms instead.

The Bottom Line

Eventin scores 79.21/100, which is respectable but trails the top alternatives, mostly because its popularity and support footprint are still smaller despite an excellent 92/100 user rating. It is a strong pick for users who want an all-in-one event and ticketing solution with AI assistance and do not want to bolt on WooCommerce. Anyone needing the deepest community resources or WooCommerce-native workflows will be better served by one of the higher-scoring competitors.

Related Plugins

EventPrime 85/100

Pick EventPrime instead if you want a higher overall quality score and a slightly more polished frontend calendar experience.

Event Booking Manager for WooCommerce 85/100

Pick mage-eventpress instead if your ticketing needs to sit natively inside WooCommerce orders, customers, and coupons.

EventON 81/100

Pick EventON if you primarily need a visually flexible events calendar with minimal booking complexity.

My Calendar 80/100

Pick My Calendar if accessibility and a long-running, stable codebase matter more than built-in ticketing.

Event Tickets and Registration 80/100

Pick Event Tickets and Registration instead if you want the largest install base and tight The Events Calendar integration.

Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce

About

Security History

What It Does

Who It's For

Who Should Skip It

The Bottom Line

Related Plugins

Tags