Skip to content
PluginCanary

Eventin

Eventin - Events Calendar, Tickets, Registration, Booking & WooCommerce
by Arraytics · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 1 Nov 2026, 71 releases in 24 months, no unpatched vulnerabilities.

88/ 100 Canary Score
Sub-scores for Eventin
Ownership100
Maintenance100
Security60
Support100
Reputation85

How the score works

Quick answers

Is Eventin still maintained?
Yes. Last release 1 Nov 2026, 71 releases in the last 24 months. 1 Nov 2026 · wordpress.org
Who owns Eventin, and has it changed hands?
No change recorded. Main committer themewinter since Apr 2020. 4 Nov 2026 · SVN log
Was Eventin removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Eventin safe?
58 known vulnerabilities, all fixed (latest in 4.1.27). Not on the exploited list. 22 Oct 2026 · Wordfence Intelligence
Is the latest Eventin update safe to install?
No ownership change before 4.1.30. No one-star spike after it. 1 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master7 Apr 2020 to 7 Apr 2020, 1 commits
themewinter28 Apr 2020 to 18 Mar 2025, 213 commits
ehsanriyadh26 Mar 2025 to 1 Nov 2026, 104 commits

3 committers recorded. No ownership change since 2020.

Maintenance

Last release
3 days ago
Releases, 24 months
71
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Eventin
Q1 20248
Q2 20246
Q3 20249
Q4 20249
Q1 20257
Q2 20256
Q3 202510
Q4 202511
Q1 202610
Q2 20267
Q3 202610
Q4 20265

Last release 1 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (21 reviews). Lifetime: 4.7.

Average rating per quarter for Eventin
Q2 20264.0
Q3 20265.0
Q4 20265.0

Average rating rose from 4.0 to 5.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star372
4 star6
3 star5
2 star7
1 star25

Security record

52 vulnerabilities in 24 months (58 on record), all patched (latest fixed in 4.1.27).

Show 58 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
22 Oct 2026Eventin - Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.26 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.1.264.1.27Patched before disclosure
16 Oct 2026Eventin - Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.26 - Missing Authorization5.3<= 4.1.264.1.27Patched before disclosure
13 Oct 2026Eventin - Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization5.3<= 4.1.254.1.26Patched before disclosure
5 Oct 2026Eventin - Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization5.3<= 4.1.254.1.26Patched before disclosure
5 Oct 2026Eventin - Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization5.3<= 4.1.254.1.26Patched before disclosure
5 Oct 2026Eventin - Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Unauthenticated Information Exposure5.3<= 4.1.254.1.26Patched before disclosure
14 Sep 2026Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter7.5<= 4.1.234.1.24Patched before disclosure
14 Sep 2026Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter6.4<= 4.1.234.1.24Patched before disclosure
14 Sep 2026Eventin <= 4.1.23 - Missing Authorization5.3<= 4.1.234.1.24Patched before disclosure
14 Sep 2026Eventin <= 4.1.23 - Missing Authorization5.3<= 4.1.234.1.24Patched before disclosure
14 Sep 2026Eventin <= 4.1.23 - Unauthenticated Payment Bypass5.3<= 4.1.234.1.24Patched before disclosure
14 Sep 2026Eventin <= 4.1.23 - Missing Authorization4.3<= 4.1.234.1.24Patched before disclosure
8 Sep 2026Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint5.4<= 4.1.174.1.18Patched before disclosure
8 Sep 2026Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter7.5<= 4.1.224.1.23Patched before disclosure
8 Sep 2026Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter7.5<= 4.1.224.1.23Patched before disclosure
8 Sep 2026Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter5.3<= 4.1.224.1.23Patched before disclosure
5 Sep 2026Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Missing Authorization4.3< 4.1.224.1.22Patched before disclosure
5 Sep 2026Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.21 - Authenticated (Contributor+) Path Traversal6.5< 4.1.214.1.21Patched before disclosure
1 Sep 2026Eventin - Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption5.3<= 4.1.224.1.23Patched before disclosure
26 Aug 2026Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Unauthenticated Information Exposure5.3< 4.1.224.1.22Patched before disclosure
24 Aug 2026Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.21 - Authenticated (Contributor+) Server-Side Request Forgery6.4< 4.1.214.1.21Patched before disclosure
24 Aug 2026Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.19 - Unauthenticated Order Completion5.3< 4.1.194.1.19Patched before disclosure
17 Aug 2026Eventin <= 4.1.20 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Event Modification, Deletion and Ownership Takeover4.3<= 4.1.204.1.21Patched before disclosure
17 Aug 2026Eventin <= 4.1.20 - Authenticated (Contributor+) Insecure Direct Object Reference to Speaker Account Deletion4.3<= 4.1.204.1.21Patched before disclosure
17 Aug 2026Eventin <= 4.1.20 - Missing Authorization4.3<= 4.1.204.1.21Patched before disclosure

Changelog mentions of security fixes: 4.1.20 (security, vulnerability); 4.1.21 (security); 4.1.22 (security); 4.1.23 (security); 4.1.24 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 7 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Eventin
4 May 2026615
11 May 20261,483
18 May 20267,180
25 May 20261,637
1 Jun 20266,411
8 Jun 20261,549
15 Jun 20266,991
22 Jun 20261,914
29 Jun 20261,284
6 Jul 20267,548
13 Jul 202611,879
20 Jul 20262,123
27 Jul 20261,417
3 Aug 202611,860
10 Aug 20268,203
17 Aug 20267,708
24 Aug 20267,575
31 Aug 20262,872
7 Sep 20266,629
14 Sep 20266,550
21 Sep 20265,256
28 Sep 20261,994
5 Oct 20268,387
12 Oct 20266,984
19 Oct 20267,470
26 Oct 202611,195
2 Nov 20261,459

Weekly downloads over the last 4 weeks are 25% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Events Widgets For Elementor And TheScore 100 · 10,000+Events Shortcodes For The EventsScore 96 · 10,000+WP Events ManagerScore 95 · 30,000+ICS CalendarScore 95 · 10,000+The Events Calendar Shortcode & BlockScore 94 · 10,000+

Facts

Version4.1.30
AuthorArraytics
Added28 Apr 2020
Last updated1 Nov 2026
Active installs10,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsevents, calendar, Event Tickets, events calendar, event registration

Other plugins by this author: WPCafe - Restaurant Menu, Online Food Ordering & Table Booking System, Timetics - Appointment Booking Calendar & Scheduling, Eventin Addons for Divi Builder, Booktics - Appointment Booking Calendar for Service Businesses, Eventin Addon for Elementor, Aisentic - AI Copilot for WordPress Dashboard, WPCafe Elementor Addon - Restaurant Menu, Ordering and Reservation Widgets, WPCafe Multivendor Restaurant Addon for Dokan, Loyalty Points and Rewards Plugin for WordPress - Pointics, Eventin Addon for TutorLMS, Eventin Addon for FluentCart, WPCafe Restaurant Addon for Oxygen Builder

Questions

Is Eventin still maintained?

Yes. Last release 1 Nov 2026, 71 releases in the last 24 months.

Who owns Eventin, and has it changed hands?

No change recorded. Main committer themewinter since Apr 2020.

Was Eventin removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Eventin safe?

58 known vulnerabilities, all fixed (latest in 4.1.27). Not on the exploited list.

Is the latest Eventin update safe to install?

No ownership change before 4.1.30. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue