Eventprime
9 CVEs in 2 Eventprime products, including Eventprime, Eventprime – Events Calendar, Bookings And Tickets. Newest: CVE-2026-42691 (2026-10-29).
Eventprime products with known CVEs
Eventprime CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-42691 | Medium | 5.4 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in EventPrime EventPrime eventprime-event-calendar-management allows Privilege Abuse.This issue… |
CVE-2026-56053 | High | 8.8 | 2026-06-25 | Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions. |
CVE-2026-42687 | High | 8.1 | 2026-06-15 | Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions. |
CVE-2026-42686 | High | 7.1 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions. |
CVE-2026-39518 | High | 7.1 | 2026-06-15 | Subscriber Insecure Direct Object References (IDOR) in EventPrime <= 4.3.0.0 versions. |
CVE-2026-42669 | High | 7.5 | 2026-06-02 | Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects EventPrime: from… |
CVE-2023-45637 | High | 7.1 | 2023-10-25 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime EventPrime – Events Calendar, Bookings and Tickets plugin <= 3.1.5 versions. |
CVE-2023-35884 | High | 7.1 | 2023-06-20 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 3.0.5 versions. |
CVE-2023-33326 | High | 7.1 | 2023-05-28 | Unauth. Reflected (XSS) Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 2.8.6 versions. |