Advisories · Technology

EventPrime.

Every CVE that names EventPrime among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118523 CVE record

CVSS 5.3 Medium

EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override
- EventPrime
- Information disclosure
Not analysed yet 4 Nov 2026
CVE-2026-42691 CVE record

CVSS 5.4 Medium

WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerability
- EventPrime
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-56053 CVE record

CVSS 8.8 High

WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability
- EventPrime
- Insecure deserialization
Not analysed yet 25 Jun 2026
CVE-2026-42687 CVE record

CVSS 8.1 High

WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability
- EventPrime
- Insecure deserialization
Not analysed yet 15 Jun 2026
CVE-2026-42686 CVE record

CVSS 7.1 High

WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability
- EventPrime
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2026
CVE-2026-39518 CVE record

CVSS 7.1 High

WordPress EventPrime plugin <= 4.3.0.0 - Insecure Direct Object References (IDOR) vulnerability
- EventPrime
- Broken access control
Not analysed yet 15 Jun 2026
CVE-2026-42669 CVE record

CVSS 7.5 High

WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability
- EventPrime
- Broken access control
Not analysed yet 2 Jun 2026
CVE-2024-4665 CVE record

CVSS 6.4 Medium

EventPrime – Events Calendar, Bookings and Tickets < 3.5.0 - Subscriber+ Arbitrary booking settings update
- EventPrime
Not analysed yet 15 May 2025
CVE-2024-43223 CVE record

CVSS 4.3 Medium

WordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerability
- EventPrime
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2023-6447 CVE record

CVSS 5.3 Medium

EventPrime < 3.3.6 - Unauthenticated Event Access
- EventPrime
Not analysed yet 22 Jan 2024
CVE-2023-4252 CVE record

EventPrime <= 3.2.9 - Booking Pricing Bypass
- EventPrime
Not analysed yet 27 Nov 2023
CVE-2023-4250 CVE record

CVSS 6.1 Medium

EventPrime < 3.2.0 - Reflected XSS
- EventPrime
Not analysed yet 31 Oct 2023
CVE-2023-4251 CVE record

CVSS 4.3 Medium

EventPrime < 3.2.0 - Booking Creation via CSRF
- EventPrime
Not analysed yet 31 Oct 2023
CVE-2023-5519 CVE record

CVSS 4.3 Medium

EventPrime < 3.2.0 - Booking Creation via CSRF
- EventPrime
Not analysed yet 31 Oct 2023
CVE-2023-5238 CVE record

CVSS 6.1 Medium

EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter
- EventPrime
Not analysed yet 31 Oct 2023
CVE-2023-35884 CVE record

CVSS 7.1 High

WordPress EventPrime Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)
- EventPrime
- Cross-site scripting (XSS)
Not analysed yet 20 Jun 2023
CVE-2023-33326 CVE record

CVSS 7.1 High

WordPress EventPrime Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)
- EventPrime
- Cross-site scripting (XSS)
Not analysed yet 28 May 2023