Eventprime
8 CVEs across 2 Eventprime products. Browse Eventprime vulnerabilities, severities, and proof-of-concept exploits.
Eventprime products with known CVEs
Eventprime CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-56053 | High | 8.8 | 2026-06-25 | Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions. |
CVE-2026-42687 | High | 8.1 | 2026-06-15 | Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions. |
CVE-2026-42686 | High | 7.1 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions. |
CVE-2026-39518 | High | 7.1 | 2026-06-15 | Subscriber Insecure Direct Object References (IDOR) in EventPrime <= 4.3.0.0 versions. |
CVE-2026-42669 | High | 7.5 | 2026-06-02 | Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects EventPrime: from… |
CVE-2023-45637 | High | 7.1 | 2023-10-25 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime EventPrime – Events Calendar, Bookings and Tickets plugin <= 3.1.5 versions. |
CVE-2023-35884 | High | 7.1 | 2023-06-20 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 3.0.5 versions. |
CVE-2023-33326 | High | 7.1 | 2023-05-28 | Unauth. Reflected (XSS) Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 2.8.6 versions. |