Skip to content
OpenAdvisories

Vendor

EventPrime

9 known vulnerabilities.

Products

EventPrime 8 EventPrime – Events Calendar, Bookings and Tickets 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2026-56053

    WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.

    EventPrime EventPrime
  • High 8.1
    CVE-2026-42687

    WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.

    EventPrime EventPrime
  • High 7.1
    CVE-2026-42686

    WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.

    EventPrime EventPrime
  • High 7.1
    CVE-2026-39518

    WordPress EventPrime plugin <= 4.3.0.0 - Insecure Direct Object References (IDOR) vulnerability

    Subscriber Insecure Direct Object References (IDOR) in EventPrime <= 4.3.0.0 versions.

    EventPrime EventPrime
  • High 7.5
    CVE-2026-42669

    WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0.

    EventPrime EventPrime
  • High 7.1
    CVE-2023-45637

    WordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime EventPrime – Events Calendar, Bookings and Tickets plugin <= 3.1.5 versions.

    EventPrime EventPrime – Events Calendar, Bookings and Tickets
  • High 7.1
    CVE-2023-35884

    WordPress EventPrime Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 3.0.5 versions.

    EventPrime EventPrime
  • High 7.1
    CVE-2023-33326

    WordPress EventPrime Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected (XSS) Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 2.8.6 versions.

    EventPrime EventPrime