Eventprime Security Vulnerabilities and Issues — Eventprime CVE List

Lucene search

MetagaussEventprime

5 matches found

CVE•added 2024/03/09 7:15 a.m.•45 views

CVE-2024-1124

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the ep_send_attendees_email() function in all versions up to, and including, 3.4.1. This makes it possible for authenticated attackers, with s...

4.3CVSS5.3AI score0.00066EPSS

CVE•added 2023/10/31 2:15 p.m.•37 views

CVE-2023-4251

The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks.

4.3CVSS4.5AI score0.0014EPSS

Web

CVE•added 2024/03/13 4:15 p.m.•37 views

CVE-2024-1127

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the booking_export_all() function in all versions up to, and including, 3.4.1. This makes it possible for authenticated attackers, with subsc...

4.3CVSS5.2AI score0.00241EPSS

CVE•added 2025/03/07 2:15 a.m.•36 views

CVE-2024-13526

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the export_submittion_attendees function in all versions up to, and including, 4.0.7.3. This makes it possible for authenticated attackers, ...

4.3CVSS6.7AI score0.00017EPSS

CVE•added 2023/10/31 2:15 p.m.•25 views

CVE-2023-5519

The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks.

4.3CVSS4.6AI score0.00153EPSS