Skip to content
OpenAdvisories

Vendor

Metagauss

118 known vulnerabilities.

Products

ProfileGrid – User Profiles, Groups and Communities 25 ProfileGrid 25 RegistrationMagic 18 EventPrime – Events Calendar, Bookings and Tickets 17 RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login 15 EventPrime 12 Download Plugin 3 Event Kikfyre 1 Download Theme 1 Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-1657 Public exploit

    EventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint

    The EventPrime plugin for WordPress is vulnerable to unauthorized image file upload in all versions up to, and including, 4.2.8.4. This is due to the plugin registering the upload_file_media AJAX action as publicly accessible (nopriv-enabled) without implemen…

    Metagauss EventPrime – Events Calendar, Bookings and Tickets Web / CMS