Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-42691 EUVD-2026-112888GHSA-qghx-937p-xqf7

WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerability

Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-management allows Privilege Abuse.This issue affects EventPrime: from n/a through 4.3.6.0.

Affected products

VendorProductAffectedFixed
EventPrime EventPrime ≤ 4.3.6.0 —

References