Skip to content
PluginCanary

Events Manager - Calendar, Bookings, Tickets, Appointments and more!

by Marcus (aka @msykes) · 60,000+ active installs · Checked 3 Nov 2026
Healthy12 Warnings

Healthy: vulnerability published 22 Oct 2026, fixed in 7.4.9.

81/ 100 Canary Score
Sub-scores for Events Manager - Calendar, Bookings, Tickets, Appointments and more!
Ownership100
Maintenance100
Security60
Support57
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 22 Oct 2026, fixed in 7.4.9. Update to version 7.4.9 or later.22 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 6 Oct 2026, fixed in 7.4.7. Update to version 7.4.7 or later.6 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 7.4.6. Update to version 7.4.6 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 22 Sep 2026, fixed in 7.4.5. Update to version 7.4.5 or later.22 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 22 Sep 2026, fixed in 7.4.5. Update to version 7.4.5 or later.22 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 7.3.4. Update to version 7.3.4 or later.4 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Aug 2026, fixed in 7.4.1. Update to version 7.4.1 or later.24 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 24 Aug 2026, fixed in 7.4. Update to version 7.4 or later.24 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 24 Aug 2026, fixed in 7.4.1. Update to version 7.4.1 or later.24 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 24 Aug 2026, fixed in 7.4.1. Update to version 7.4.1 or later.24 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 10 Aug 2026, fixed in 7.4.1. Update to version 7.4.1 or later.10 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 10 Aug 2026, fixed in 7.4.1. Update to version 7.4.1 or later.10 Aug 2026Evidence
  • InfoSEC-325 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
netweblogic15 Nov 2009 to 1 Mar 2024, 789 commits
msykes11 Nov 2022 to 24 Sep 2026, 177 commits
pixelitemedia23 May 2026 to 26 Oct 2026, 34 commits

New committer pixelitemedia made a first commit on 23 May 2026.

Maintenance

Last release
9 days ago
Releases, 24 months
55
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for Events Manager - Calendar, Bookings, Tickets, Appointments and more!
Q1 20243
Q2 20243
Q3 20249
Q4 20241
Q1 20256
Q2 20253
Q3 202513
Q4 20254
Q1 20260
Q2 202613
Q3 20269
Q4 20267

Last release 26 Oct 2026. Tested with WordPress 7.1 (current).

Support

57% of 42 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
22 Oct 2026Events Manager – Calendar, Bookings, Tickets, Appointments and more! <= 7.4.8 - Reflected Cross-Site Scripting6.1<= 7.4.87.4.90
12 Oct 2026Events Manager – Calendar, Bookings, Tickets, Appointments and more! <= 7.4.8 - Unauthenticated Race Condition5.3<= 7.4.8Not affectedn/a
6 Oct 2026Events Manager – Calendar, Bookings, Tickets, Appointments and more! <= 7.4.6 - Authenticated (Subscriber+) SQL Injection6.5<= 7.4.67.4.72
5 Oct 2026Events Manager – Calendar, Bookings, Tickets, Appointments and more! <= 7.4.5 - Unauthenticated Information Exposure5.3<= 7.4.57.4.60
22 Sep 2026Events Manager <= 7.4.4 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 7.4.47.4.50
22 Sep 2026Events Manager 7.4.1 - 7.4.4 - Authenticated (Subscriber+) Information Exposure4.37.4.1 to 7.4.47.4.50
4 Sep 2026Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributes5.4<= 7.3.37.3.40
24 Aug 2026Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter6.1<= 7.4.0.17.4.10
24 Aug 2026Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys6.6<= 7.3.7.47.40
24 Aug 2026Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters5.3<= 7.4.07.4.10
24 Aug 2026Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action6.5<= 7.4.07.4.10
10 Aug 2026Events Manager <= 7.4.0 - Authenticated (Subscriber+) SQL Injection6.5<= 7.4.07.4.10
10 Aug 2026Events Manager <= 7.4.0 - Unauthenticated Privilege Escalation7.3<= 7.4.07.4.10
4 Aug 2026Events Manager – Calendar, Bookings, Tickets, and more! <= 7.4.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 7.4.27.4.324
30 Jul 2026Events Manager <= 7.3 - Unauthenticated Pending Upload Disclosure5.3<= 7.37.40
8 Jul 2026Events Manager – Calendar, Bookings, Tickets, and more! <= 7.3.6 - Unauthenticated PHP Object Injection8.1<= 7.3.67.3.70
1 Jul 2026Events Manager <= 7.3.6 - Unauthenticated SQL Injection7.5<= 7.3.67.3.70
17 Dec 2025Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode6.4<= 7.2.2.17.2.30
11 Dec 2025Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletion4.3<= 7.2.2.27.2.2.3n/a
11 Dec 2025Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure5.3<= 7.2.2.27.2.2.3n/a
9 Jul 2025Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes6.4<= 6.6.4.4, 7.0.1 to 7.0.36.6.50
9 Jul 2025Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter7.5<= 6.6.4.4, 7.0.1 to 7.0.36.6.50
9 Jul 2025Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter6.1<= 6.6.4.4, 7.0.1 to 7.0.36.6.50
26 Feb 2025Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.4.1 - Missing Authorization5.3<= 6.6.4.16.6.4.20
20 Feb 2025Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter7.5<= 6.6.36.6.40

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Events Manager - Calendar, Bookings, Tickets, Appointments and more!
Q2 20255.0
Q3 20254.0
Q4 20254.3
Q1 20263.4
Q2 20262.7
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q2 2025 and Q4 2026.

Rating distribution
5 star389
4 star41
3 star24
2 star35
1 star62
Latest low reviews

Momentum

60,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Events Manager - Calendar, Bookings, Tickets, Appointments and more!
4 May 20261,031
11 May 20261,750
18 May 20261,680
25 May 202641,311
1 Jun 202651,870
8 Jun 202631,768
15 Jun 202628,908
22 Jun 20269,015
29 Jun 2026101,348
6 Jul 202639,164
13 Jul 20266,402
20 Jul 20264,995
27 Jul 20264,844
3 Aug 202656,047
10 Aug 202611,892
17 Aug 20265,369
24 Aug 202630,668
31 Aug 20268,689
7 Sep 20265,311
14 Sep 202641,408
21 Sep 202612,701
28 Sep 202629,577
5 Oct 202639,331
12 Oct 202634,136
19 Oct 202673,000
26 Oct 202645,967
2 Nov 20261,509

Weekly downloads over the last 4 weeks are 45% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Events Shortcodes For The Events CalendarScore 92 · 10,000+Events Widgets For Elementor And The Events CalendarScore 91 · 10,000+Sugar Calendar - Events Calendar, Event Tickets, and Events Management PlatformScore 91 · 10,000+The Events Calendar Shortcode & BlockScore 91 · 10,000+Ticket Tailor - Event Ticketing & RegistrationScore 91 · 4,000+

Facts

Version7.4.12
AuthorMarcus (aka @msykes)
Added6 Aug 2008
Last updated26 Oct 2026
Active installs60,000+
Requires WordPress6.1
Tested up to7.1.4
Requires PHP7.0
CategoryBookings & Scheduling > Appointment Scheduling
Tagsevents, tickets, bookings, calendar, appointments

Other plugins by this author: Meta Tag Manager, Login With Ajax - Fast Logins, 2FA, Redirects, WP FullCalendar, Disable User Gravatar, WP Safe Mode, Events Manager and WPML Compatibility, Events Manager - Zoom Integration, Twitter Goodies Widgets, Cursor Trail, User Role Sync for MailPoet, Plugin Commander, BP Expand Activity

Questions

Is Events Manager - Calendar, Bookings, Tickets, Appointments and more! still maintained?

Events Manager - Calendar, Bookings, Tickets, Appointments and more! was last updated on 26 Oct 2026. Its Canary status is Healthy.

Is Events Manager - Calendar, Bookings, Tickets, Appointments and more! safe?

Events Manager - Calendar, Bookings, Tickets, Appointments and more! has no open unpatched vulnerabilities on record. 25 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Events Manager - Calendar, Bookings, Tickets, Appointments and more!?

The wordpress.org author is Marcus (aka @msykes). Recent committers: pixelitemedia, msykes, netweblogic, nutsmuggler, plugin-master. New committer pixelitemedia made a first commit on 23 May 2026.

What can I use instead of Events Manager - Calendar, Bookings, Tickets, Appointments and more!?

Plugins in the same category with a higher Canary Score: Events Shortcodes For The Events Calendar, Events Widgets For Elementor And The Events Calendar, Sugar Calendar - Events Calendar, Event Tickets, and Events Management Platform, The Events Calendar Shortcode & Block, Ticket Tailor - Event Ticketing & Registration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue