Eventprime vulnerabilities
8 vulnerabilities
Known vulnerabilities in Eventprime products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Eventprime7 vulnerabilities
- Eventprime – Events Calendar, Bookings And Tickets1 vulnerabilities
HighCVE-2026-42669eventprime +1 moreWordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerabilityMissing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects EventPrime: from n/a through 4.3.2.0.EPSS0.35%HighCVE-2026-42687eventprime +1 moreWordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerabilityUnauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.EPSS0.44%HighCVE-2026-42686eventprime +1 moreWordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerabilitySubscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.EPSS0.38%HighCVE-2026-39518eventprime +1 moreWordPress EventPrime plugin <= 4.3.0.0 - Insecure Direct Object References (IDOR) vulnerabilitySubscriber Insecure Direct Object References (IDOR) in EventPrime <= 4.3.0.0 versions.EPSS0.29%HighCVE-2026-56053eventprime +1 moreWordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerabilitySubscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.EPSS0.52%HighCVE-2023-45637eventprime · eventprime – events calendar, bookings and tickets +2 moreWordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime EventPrime – Events Calendar, Bookings and Tickets plugin <= 3.1.5 versions.EPSS0.51%HighCVE-2023-35884eventprime +2 moreWordPress EventPrime Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 3.0.5 versions.EPSS0.41%HighCVE-2023-33326eventprime +2 moreWordPress EventPrime Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected (XSS) Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 2.8.6 versions.EPSS0.38%