| CVE-2026-118523 |
EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override
|
5.3
Moyenne
|
4 nov. 2026 |
| CVE-2024-4665 |
The EventPrime WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, allowing…
|
6.4
Moyenne
|
15 mai 2025 |
| CVE-2023-6447 |
The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors…
|
5.3
Moyenne
|
22 janv. 2024 |
| CVE-2023-4252 |
The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an…
|
Non notée
|
27 nov. 2023 |
| CVE-2023-4250 |
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them back in…
|
6.1
Moyenne
|
31 oct. 2023 |
| CVE-2023-4251 |
The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow…
|
4.3
Moyenne
|
31 oct. 2023 |
| CVE-2023-5519 |
The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow…
|
4.3
Moyenne
|
31 oct. 2023 |
| CVE-2023-5238 |
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the…
|
6.1
Moyenne
|
31 oct. 2023 |