Events Maker by dFactory
Avoid: vulnerability published 10 Oct 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 10 Oct 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.24 Oct 2025Evidence
- CriticalMNT-1No release in 118 months (last release 30 Jan 2017). Plan a replacement if the plugin is important to your site.30 Jan 2018Evidence
- WarningMNT-2Tested up to WordPress 4.7.39, 24 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 10 years ago
- Releases, 24 months
- 0
- Tested up to
- 4.7 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 30 Jan 2017. Tested up to 4.7, 24 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 10 Oct 2025 | Events Maker by dFactory <= 1.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.6.14 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.7 from 33 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 29 |
|---|---|
| 4 star | 2 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 2 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 14 |
|---|---|
| 11 May 2026 | 24 |
| 18 May 2026 | 26 |
| 25 May 2026 | 34 |
| 1 Jun 2026 | 29 |
| 8 Jun 2026 | 38 |
| 15 Jun 2026 | 42 |
| 22 Jun 2026 | 20 |
| 29 Jun 2026 | 20 |
| 6 Jul 2026 | 23 |
| 13 Jul 2026 | 30 |
| 20 Jul 2026 | 34 |
| 27 Jul 2026 | 29 |
| 3 Aug 2026 | 42 |
| 10 Aug 2026 | 39 |
| 17 Aug 2026 | 48 |
| 24 Aug 2026 | 42 |
| 31 Aug 2026 | 41 |
| 7 Sep 2026 | 62 |
| 14 Sep 2026 | 62 |
| 21 Sep 2026 | 59 |
| 28 Sep 2026 | 75 |
| 5 Oct 2026 | 73 |
| 12 Oct 2026 | 67 |
| 19 Oct 2026 | 86 |
| 26 Oct 2026 | 103 |
| 2 Nov 2026 | 17 |
Weekly downloads over the last 4 weeks are 56% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.6.14 |
|---|---|
| Author | dFactory |
| Added | 16 Sep 2013 |
| Last updated | 30 Jan 2017 |
| Active installs | 1,000+ |
| Requires WordPress | 4.0 |
| Tested up to | 4.7.39 |
| Requires PHP | not stated |
| Category | Bookings & Scheduling > Event Management & Ticketing |
| Tags | RSVP, Event, events, calendar, registration |
Other plugins by this author: Responsive Lightbox & Gallery, Post Views Counter, Image Watermark, Download Attachments, Restrict Widgets, Image & Text Widget, Widget Icon, News Manager, bbPress Notifications, Ajaxed Comments
Questions
Is Events Maker by dFactory still maintained?
Events Maker by dFactory was last updated on 30 Jan 2017. Its Canary status is Avoid.
Is Events Maker by dFactory safe?
Events Maker by dFactory has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns Events Maker by dFactory?
The wordpress.org author is dFactory. Recent committers: dfactory, plugin-master. We have recorded no ownership change.
What can I use instead of Events Maker by dFactory?
Plugins in the same category with a higher Canary Score: Events Shortcodes For The Events Calendar, Events Widgets For Elementor And The Events Calendar, Sugar Calendar - Events Calendar, Event Tickets, and Events Management Platform, The Events Calendar Shortcode & Block, Ticket Tailor - Event Ticketing & Registration.