| CVE-2026-118523 |
EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override
|
5.3
Medium
|
Nov 4, 2026 |
| CVE-2024-4665 |
The EventPrime WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, allowing…
|
6.4
Medium
|
May 15, 2025 |
| CVE-2023-6447 |
The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors…
|
5.3
Medium
|
Jan 22, 2024 |
| CVE-2023-4252 |
The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an…
|
Not rated
|
Nov 27, 2023 |
| CVE-2023-4250 |
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them back in…
|
6.1
Medium
|
Oct 31, 2023 |
| CVE-2023-4251 |
The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow…
|
4.3
Medium
|
Oct 31, 2023 |
| CVE-2023-5519 |
The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow…
|
4.3
Medium
|
Oct 31, 2023 |
| CVE-2023-5238 |
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the…
|
6.1
Medium
|
Oct 31, 2023 |