Eventprime Eventprime
7 CVEs affecting Eventprime Eventprime. Latest disclosed: 2026-06-25. Critical: 0, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-56053 | High | 8.8 | 2026-06-25 | Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions. |
CVE-2026-42687 | High | 8.1 | 2026-06-15 | Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions. |
CVE-2026-42669 | High | 7.5 | 2026-06-02 | Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from… |
CVE-2026-42686 | High | 7.1 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions. |
CVE-2026-39518 | High | 7.1 | 2026-06-15 | Subscriber Insecure Direct Object References (IDOR) in EventPrime <= 4.3.0.0 versions. |
CVE-2023-35884 | High | 7.1 | 2023-06-20 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 3.0.5 versions. |
CVE-2023-33326 | High | 7.1 | 2023-05-28 | Unauth. Reflected (XSS) Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 2.8.6 versions. |