Cpe:2.3:a:themewinter:eventin:*:*:*:*:*:*:*:*

The Eventin WordPress plugin contains a local file inclusion vulnerability in the event_layout parameter, allowing authenticated contributors to execute arbitrary PHP code.