CVE-2023-4252 EventPrime <= 3.2.9 - Booking Pricing Bypass

2023-11-2716:21:59

WPScan

raw.githubusercontent.com

eventprime

wordpress

vulnerability

booking

payment bypass

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

15.9%

JSON

The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment.