CVE-2026-42686

Subscriber Cross Site Scripting XSS in EventPrime = 4.3.2.1 versions...

CVE-2026-39518

Subscriber Insecure Direct Object References IDOR in EventPrime = 4.3.0.0 versions...

CVE-2026-42687

The CVE-2026-42687 entry concerns the WordPress EventPrime plugin (versions ≤ 4.3.2.1). It describes an unauthenticated PHP Object Injection vulnerability in EventPrime, with a CVSS v3.1 base score of 8.1 (HIGH) and a network attack vector, no user interaction, and high impact on confidentiality,...

CVE-2026-42687 WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

CVE-2026-42687 WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

CVE-2026-42686

WordPress EventPrime plugin

CVE-2026-42686 WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in EventPrime = 4.3.2.1 versions...

EUVD-2026-36834

Subscriber Cross Site Scripting XSS in EventPrime = 4.3.2.1 versions...

CVE-2026-42686 WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in EventPrime = 4.3.2.1 versions...

CVE-2026-39518

The CVE pertains to WordPress EventPrime plugin versions

CVE-2026-39518 WordPress EventPrime plugin <= 4.3.0.0 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in EventPrime = 4.3.0.0 versions...

CVE-2026-39518 WordPress EventPrime plugin <= 4.3.0.0 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in EventPrime = 4.3.0.0 versions...

PT-2026-49394

Subscriber Insecure Direct Object References IDOR in EventPrime = 4.3.0.0 versions...

CVE-2026-42687: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

CVE-2026-42686: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in EventPrime = 4.3.2.1 versions...

CVE-2026-39518: Authorization Bypass Through User-Controlled Key

Subscriber Insecure Direct Object References IDOR in EventPrime = 4.3.0.0 versions...

PT-2026-49460

Subscriber Cross Site Scripting XSS in EventPrime = 4.3.2.1 versions...

PT-2026-49461

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

CVE-2026-42669

Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0...

CVE-2026-42669

Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0...