metagauss EventPrime – Events Calendar, Bookings and Tickets.

EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Cross-site scripting (XSS)

EventPrime <= 4.2.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' Parameter

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control

EventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control

EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Information disclosure

EventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control

EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control

EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Cross-site scripting (XSS)

EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Cross-site scripting (XSS)

EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting via Transaction Log

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Cross-site scripting (XSS)

EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control

EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control

EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• CWE-345

EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control

EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control

EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Cross-site scripting (XSS)

EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control

EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending

• metagauss EventPrime – Events Calendar, Bookings and Tickets
• Broken access control