WP-Safety

Event Master Plugin Security & Risk Analysis

wordpress.org/plugins/event-master

Event master is a new Wordpress plugin for organizing events.

0 active installs v1.0.0 PHP + WP 4.0+ Updated Unknown
eventevent-systemeventseventsystemfree
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Event Master Plugin Safe to Use in 2026?

Generally Safe

Score 100/100

Event Master Plugin has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The 'event-master' plugin v1.0.0 exhibits a concerning security posture primarily due to a lack of robust authorization checks on its entry points. The static analysis reveals two AJAX handlers, both of which are entirely unprotected. This means any authenticated user, regardless of their role or permissions, can trigger these functionalities, potentially leading to unintended actions or information disclosure. The complete absence of nonce and capability checks on these AJAX endpoints significantly increases the risk of cross-site request forgery (CSRF) and privilege escalation attacks.

Key Concerns

  • Unprotected AJAX handlers
  • Missing nonce checks
  • Missing capability checks
  • Low output escaping coverage
  • Unsanitized paths in taint analysis
Vulnerabilities
None known

Event Master Plugin Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Event Master Plugin Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
89
1 escaped
Nonce Checks
0
Capability Checks
0
File Operations
2
External Requests
0
Bundled Libraries
1

Bundled Libraries

jQuery

Output Escaping

1% escaped90 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
load_event_location (event-master.php:57)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

Event Master Plugin Attack Surface

Entry Points2
Unprotected2

AJAX Handlers 2

authwp_ajax_load_event_locationevent-master.php:50
noprivwp_ajax_load_event_locationevent-master.php:51
WordPress Hooks 9
actionwp_enqueue_scriptssoftsdev-event-master-content.php:15
actioninitsoftsdev-event-master-post-type.php:22
filtermanage_edit-softsdev_events_columnssoftsdev-event-master-post-type.php:26
actionmanage_posts_custom_columnsoftsdev-event-master-post-type.php:28
actionadmin_enqueue_scriptssoftsdev-event-master-post-type.php:31
actioninitsoftsdev-event-master-post-type.php:34
actionadmin_initsoftsdev-event-master-post-type.php:38
filtertemplate_includesoftsdev-event-master-post-type.php:42
actionsave_postsoftsdev-event-master-post-type.php:44
Maintenance & Trust

Event Master Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedUnknown
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

Event Master Plugin Alternatives

Events Manager – OpenStreetMaps

Events Manager – OpenStreetMaps

stonehenge-em-osm

C
63

OpenStreetMaps for Events Manager. An add-on to replace Google Maps with OpenStreetMap. 0% Google, 100% open source.

700 1 unpatched
The Events Calendar

The Events Calendar

the-events-calendar

B
82

The Events Calendar: #1 calendar plugin for WordPress. Create/manage events (virtual too!) on your site with the free plugin.

700K 25 CVEs
LatePoint – Calendar Booking Plugin for Appointments and Events

LatePoint – Calendar Booking Plugin for Appointments and Events

latepoint

F
20

Optimize your appointment scheduling with our plugin. Sync calendars, automate reminders, and keep your bookings organized.

100K 2 unpatched
Events Manager – Calendar, Bookings, Tickets, and more!

Events Manager – Calendar, Bookings, Tickets, and more!

events-manager

B
82

Events calendar with bookings, scheduling, appointments, event registration, tickets, recurring events, and venue management.

70K 34 CVEs
Booking Calendar

Booking Calendar

booking

B
82

Original "Booking Calendar" plugin. Easily manage full-day bookings, time-slot appointments, or events in our all-in-one, outstanding booking system.

50K 28 CVEs
Developer Profile

Event Master Plugin Developer Profile

dreamfox

5 plugins · 410 total installs

88
trust score
Avg Security Score
100/100
Avg Patch Time
87 days
View full developer profile
Detection Fingerprints

How We Detect Event Master Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/event-master/css/jquery.datetimepicker.css/wp-content/plugins/event-master/js/jquery.datetimepicker.js/wp-content/plugins/event-master/css/sdem-front.css/wp-content/plugins/event-master/css/sdem-admin.css/wp-content/plugins/event-master/css/jquery.fancybox.min.css/wp-content/plugins/event-master/js/jquery.fancybox.min.js/wp-content/plugins/event-master/js/sdem_maps.js/wp-content/plugins/event-master/js/sdem-front.js+3 more
Script Paths
https://maps.googleapis.com/maps/api/js?libraries=places&key=AIzaSyCLL1uo4yKXTu8cJTA6kdkKZB7vhzjcK6Qhttps://addevent.com/libs/atc/1.6.1/atc.min.js
Version Parameters
jquery-datetimepicker_js?ver=sdem_front_css?ver=sdem_admin_css?ver=sdem_lightbox_css?ver=myStyleSheets?ver=sdem-lightbox-js?ver=sdem-google-map?ver=sdem-maps?ver=sdem-add_to_cal?ver=sdem-front-js?ver=sdem_fullcalendar_css?ver=sdem_fullcalendar?ver=sdem-moment?ver=

HTML / DOM Fingerprints

CSS Classes
event_map
Data Attributes
name="sdem[lat]"name="sdem[long]"
JS Globals
initialize_map
FAQ

Frequently Asked Questions about Event Master Plugin