Skip to content
PluginCanary

EventON

EventON - Events Calendar
by Ashan Perera · 6,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 30 Oct 2026, 25 releases in 24 months, no unpatched vulnerabilities.

80/ 100 Canary Score
Sub-scores for EventON
Ownership100
Maintenance100
Security60
Support56
ReputationNo data

How the score works

Quick answers

Is EventON still maintained?
Yes. Last release 30 Oct 2026, 25 releases in the last 24 months. 30 Oct 2026 · wordpress.org
Who owns EventON, and has it changed hands?
No change recorded. Main committer ashanjay since Jan 2022. 3 Nov 2026 · SVN log
Was EventON removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is EventON safe?
22 known vulnerabilities, all fixed (latest in 2.5.8). Not on the exploited list. 8 Sep 2026 · Wordfence Intelligence
Is the latest EventON update safe to install?
No ownership change before 2.5.11. No one-star spike after it. 30 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master19 Jan 2022 to 19 Jan 2022, 1 commits
ashanjay22 Jan 2022 to 30 Oct 2026, 76 commits

2 committers recorded. No ownership change since 2022.

Maintenance

Last release
5 days ago
Releases, 24 months
25
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for EventON
Q1 20248
Q2 20241
Q3 20246
Q4 20240
Q1 20253
Q2 20257
Q3 20253
Q4 20250
Q1 20262
Q2 20264
Q3 20264
Q4 20262

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.1.

Rating distribution
5 star29
4 star2
3 star4
2 star5
1 star4

Security record

6 vulnerabilities in 24 months (22 on record), all patched (latest fixed in 2.5.8).

Show 22 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
8 Sep 2026EventON - Events Calendar <= 2.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 2.5.72.5.83
14 Aug 2025EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure4.3<= 2.4.72.4.81
16 May 2025EventON <= 2.4.4 - Missing Authorization5.3<= 2.4.42.4.54
7 May 2025EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion8.8<= 2.4.12.4.2Patched before disclosure
9 Apr 2025EventON <= 2.4 - Unauthenticated Local File Inclusion9.8<= 2.42.4.116
4 Apr 2025EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion8.8<= 2.4.12.4.229
19 Aug 2024EventON <= 2.2.16 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.2.162.2.17Patched before disclosure
8 Jul 2024EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates7.2<= 2.2.152.2.1610
30 Apr 2024EventON <= 2.2.14 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.2.142.2.1514
10 Jan 2024EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Reflected Cross-Site Scripting6.1<= 2.2.72.2.8Patched before disclosure
10 Jan 2024EventON - WordPress Virtual Event Calendar Plugin <= 4.5.8 (Pro) & <= 2.2.7 (Free) - Missing Authorization via eventon_save_virtual_event_settings5.3<= 2.2.72.2.8Patched before disclosure
10 Jan 2024EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via config_virtual_event5.3<= 2.2.72.2.8Patched before disclosure
10 Jan 2024EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via get_virtual_users5.3<= 2.2.72.2.8Patched before disclosure
10 Jan 2024EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.2.72.2.8Patched before disclosure
9 Jan 2024EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings6.5<= 2.2.82.2.9Patched before disclosure
9 Jan 2024EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta6.5<= 2.2.72.2.8Patched before disclosure
9 Jan 2024EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta6.5<= 2.2.72.2.8Patched before disclosure
9 Nov 2023EventON <= 2.1.7 - Authenticated (Admin+) HTML Injection3<= 2.1.72.2Patched before disclosure
20 Oct 2023EventON <= 2.2.2 - Reflected Cross-Site Scripting6.1<= 2.2.22.2.31
21 Sep 2023EventON <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.1.72.2Patched before disclosure
19 Jun 2023EventON <= 2.1 - Insecure Direct Object Reference to Unauthorized Post Access7.5<= 2.12.1.2Patched before disclosure
19 Jun 2023EventON <= 2.1 - Missing Authorization to Event Access5.3<= 2.12.1.2Patched before disclosure

Changelog mentions of security fixes: 2.5.11 (vulnerability, XSS).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

56% of 9 support threads resolved in the last 2 months.

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for EventON
4 May 2026268
11 May 2026513
18 May 20264,169
25 May 20263,637
1 Jun 20261,097
8 Jun 2026666
15 Jun 2026564
22 Jun 2026430
29 Jun 2026397
6 Jul 2026677
13 Jul 2026331
20 Jul 2026333
27 Jul 2026418
3 Aug 2026407
10 Aug 20263,159
17 Aug 20261,536
24 Aug 2026981
31 Aug 20263,745
7 Sep 20264,196
14 Sep 20264,110
21 Sep 20261,755
28 Sep 2026997
5 Oct 20264,526
12 Oct 2026922
19 Oct 20261,339
26 Oct 20264,061
2 Nov 2026342

Weekly downloads over the last 4 weeks are 1% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Events Widgets For Elementor And TheScore 100 · 10,000+Events Shortcodes For The EventsScore 96 · 10,000+WP Events ManagerScore 95 · 30,000+ICS CalendarScore 95 · 10,000+Sugar CalendarScore 94 · 10,000+

Facts

Version2.5.11
AuthorAshan Perera
Added22 Jan 2022
Last updated30 Oct 2026
Active installs6,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsevents, calendar, event calendar, virtual events, event management

Questions

Is EventON still maintained?

Yes. Last release 30 Oct 2026, 25 releases in the last 24 months.

Who owns EventON, and has it changed hands?

No change recorded. Main committer ashanjay since Jan 2022.

Was EventON removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is EventON safe?

22 known vulnerabilities, all fixed (latest in 2.5.8). Not on the exploited list.

Is the latest EventON update safe to install?

No ownership change before 2.5.11. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue