EventPrime
Metagauss · 27 CVEs
WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability
Mar 25, 2026
WordPress EventPrime plugin <= 4.2.6.0 - Broken Access Control vulnerability
Mar 25, 2026
WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability
Feb 19, 2026
WordPress EventPrime plugin <= 4.2.8.0 - Broken Access Control vulnerability
Jan 22, 2026
WordPress EventPrime plugin <= 4.2.4.1 - Broken Access Control vulnerability
Dec 9, 2025
WordPress EventPrime plugin <= 4.2.4.1 - Sensitive Data Exposure vulnerability
Dec 9, 2025
EventPrime – Events Calendar, Bookings and Tickets < 3.5.0 - Subscriber+ Arbitrary booking settings update
May 15, 2025
EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Ev…
Mar 7, 2025
EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket…
Dec 17, 2024
WordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerability
Nov 1, 2024
EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting
Oct 24, 2024
EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting via…
Oct 24, 2024
WordPress EventPrime plugin <= 4.0.4.5 - Open Redirection vulnerability
Oct 10, 2024
EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure
Sep 10, 2024
WordPress EventPrime plugin <= 3.3.4 - Booking Price Manipulation vulnerability
Jun 9, 2024
WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure
May 17, 2024
WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerability
Mar 27, 2024
WordPress EventPrime plugin <= 3.3.9 - Broken Access Control vulnerability
Mar 23, 2024
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Atte…
Mar 13, 2024
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass
Mar 13, 2024
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Even…
Mar 13, 2024
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbi…
Mar 9, 2024
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting
Mar 9, 2024
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite
Mar 9, 2024
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbi…
Mar 9, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-24378 | WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability | CRITICAL | 0.51% | Mar 25, 2026 |
| CVE-2025-69358 | WordPress EventPrime plugin <= 4.2.6.0 - Broken Access Control vulnerability | HIGH | 0.31% | Mar 25, 2026 |
| CVE-2026-25389 | WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability | MEDIUM | 0.25% | Feb 19, 2026 |
| CVE-2026-24380 | WordPress EventPrime plugin <= 4.2.8.0 - Broken Access Control vulnerability | HIGH | 0.21% | Jan 22, 2026 |
| CVE-2025-63006 | WordPress EventPrime plugin <= 4.2.4.1 - Broken Access Control vulnerability | MEDIUM | 0.21% | Dec 9, 2025 |
| CVE-2025-63007 | WordPress EventPrime plugin <= 4.2.4.1 - Sensitive Data Exposure vulnerability | MEDIUM | 0.26% | Dec 9, 2025 |
| CVE-2024-4665 | EventPrime – Events Calendar, Bookings and Tickets < 3.5.0 - Subscriber+ Arbitrary booking settings update | MEDIUM | 0.30% | May 15, 2025 |
| CVE-2024-13526 | EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export | MEDIUM | 0.29% | Mar 7, 2025 |
| CVE-2024-12024 | EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name | HIGH | 0.42% | Dec 17, 2024 |
| CVE-2024-43223 | WordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerability | HIGH | 0.40% | Nov 1, 2024 |
| CVE-2024-9864 | EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting | MEDIUM | 0.32% | Oct 24, 2024 |
| CVE-2024-9865 | EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting via Transaction Log | MEDIUM | 0.39% | Oct 24, 2024 |
| CVE-2024-47648 | WordPress EventPrime plugin <= 4.0.4.5 - Open Redirection vulnerability | MEDIUM | 0.27% | Oct 10, 2024 |
| CVE-2024-8369 | EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure | MEDIUM | 0.35% | Sep 10, 2024 |
| CVE-2024-31275 | WordPress EventPrime plugin <= 3.3.4 - Booking Price Manipulation vulnerability | CRITICAL | 0.47% | Jun 9, 2024 |
| CVE-2023-33321 | WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure | MEDIUM | 0.52% | May 17, 2024 |
| CVE-2024-29776 | WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.36% | Mar 27, 2024 |
| CVE-2024-24832 | WordPress EventPrime plugin <= 3.3.9 - Broken Access Control vulnerability | HIGH | 0.44% | Mar 23, 2024 |
| CVE-2024-1126 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval | MEDIUM | 0.44% | Mar 13, 2024 |
| CVE-2024-1321 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass | MEDIUM | 0.26% | Mar 13, 2024 |
| CVE-2024-1127 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export | MEDIUM | 0.53% | Mar 13, 2024 |
| CVE-2024-1125 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion | MEDIUM | 0.32% | Mar 9, 2024 |
| CVE-2024-1320 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting | MEDIUM | 0.37% | Mar 9, 2024 |
| CVE-2024-1123 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite | MEDIUM | 0.41% | Mar 9, 2024 |
| CVE-2024-1124 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending | MEDIUM | 0.32% | Mar 9, 2024 |
Showing 1 to 25 of 27 CVEs