Metagauss

Eventprime

35 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2026-25389

  • EPSS 0.04%
  • Veröffentlicht 19.02.2026 08:27:02
  • Zuletzt bearbeitet 27.02.2026 17:16:31

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through <= 4.2.8.3.

4.3

CVE-2026-1655

  • EPSS 0.01%
  • Veröffentlicht 18.02.2026 07:25:40
  • Zuletzt bearbeitet 18.02.2026 17:51:53

The EventPrime plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization checks in all versions up to, and including, 4.2.8.4. This is due to the save_frontend_event_submission function accepting a user-control...

5.3

CVE-2026-1657

  • EPSS 0.07%
  • Veröffentlicht 17.02.2026 05:29:53
  • Zuletzt bearbeitet 18.02.2026 17:52:22

The EventPrime plugin for WordPress is vulnerable to unauthorized image file upload in all versions up to, and including, 4.2.8.4. This is due to the plugin registering the upload_file_media AJAX action as publicly accessible (nopriv-enabled) without...

8.8

CVE-2026-24380

  • EPSS 0.05%
  • Veröffentlicht 22.01.2026 16:52:46
  • Zuletzt bearbeitet 26.01.2026 19:16:36

Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through <= 4.2.8.0.

5.3

CVE-2025-14507

  • EPSS 0.02%
  • Veröffentlicht 13.01.2026 13:49:13
  • Zuletzt bearbeitet 14.01.2026 16:26:00

The EventPrime - Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.0 via the REST API. This makes it possible for unauthenticated attackers to extrac...

4.3

CVE-2025-63007

  • EPSS 0.04%
  • Veröffentlicht 09.12.2025 14:52:26
  • Zuletzt bearbeitet 20.01.2026 15:18:21

Insertion of Sensitive Information Into Sent Data vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through <= 4.2.4.1.

4.3

CVE-2025-63006

  • EPSS 0.04%
  • Veröffentlicht 09.12.2025 14:52:26
  • Zuletzt bearbeitet 20.01.2026 15:18:21

Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through <= 4.2.4.1.

4.3

CVE-2025-12498

  • EPSS 0.04%
  • Veröffentlicht 08.11.2025 06:39:56
  • Zuletzt bearbeitet 12.11.2025 16:19:59

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized booking note creation due to a missing capability check on the 'booking_add_notes' function in all versions up to, and including, 4.2.0.0. This ...

6.4

CVE-2024-4665

Exploit
  • EPSS 0.06%
  • Veröffentlicht 15.05.2025 20:15:54
  • Zuletzt bearbeitet 13.11.2025 21:15:48

The EventPrime WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, allowing users to change/cancel bookings for other users. Additionally, the feature is lacking a nonce.

4.3

CVE-2024-13526

  • EPSS 0.04%
  • Veröffentlicht 07.03.2025 02:15:37
  • Zuletzt bearbeitet 12.08.2025 17:00:44

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the export_submittion_attendees function in all versions up to, and including, 4.0.7.3. Thi...