WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eventprime-event-calendar-management
Published
2023-12-29
Title
EventPrime < 3.3.6 - Unauthenticated Event Access
Slug
eventprime-event-calendar-management
Published
2023-11-21
Title
EventPrime – Modern Events Calendar, Bookings and Tickets < 3.3.3 - Contributor+ Stored XSS
Slug
eventprime-event-calendar-management
Published
2024-02-02
Title
EventPrime < 3.4.0 - Improper Input Validation via save_event_booking
Slug
eventprime-event-calendar-management
Published
2024-02-14
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Event Export
Slug
eventprime-event-calendar-management
Published
2024-02-14
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.3 - Missing Authorization to Arbitrary Post Overwrite
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.3 - Unauthenticated Booking Payment Bypass
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.4 - Unauthenticated Stored Cross-Site Scripting
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
eventprime-event-calendar-management
Published
2024-03-25
Title
EventPrime < 3.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
eventprime-event-calendar-management
Published
2024-04-05
Title
EventPrime < 3.3.5 - Unauthenticated Booking Price Manipulation
Slug
eventprime-event-calendar-management
Published
2024-08-09
Title
EventPrime < 4.0.4.0 - Missing Authorization via calendar_event_create()
Slug
eventprime-event-calendar-management
Published
2024-09-09
Title
EventPrime < 4.0.4.4 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure
Slug
eventprime-event-calendar-management
Published
2024-09-30
Title
EventPrime < 4.0.4.6 - Open Redirect
Slug
eventprime-event-calendar-management
Published
2024-10-23
Title
EventPrime – Modern Events Calendar, Bookings and Tickets < 4.0.4.8 - Unauthenticated Stored Cross-Site Scripting via Transaction Log
Slug
eventprime-event-calendar-management
Published
2024-10-23
Title
EventPrime – Modern Events Calendar, Bookings and Tickets < 4.0.4.8 - Unauthenticated Stored Cross-Site Scripting
Slug
eventprime-event-calendar-management
Published
2024-04-23
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.5.0 - Subscriber+ Arbitrary booking settings update
Slug
eventprime-event-calendar-management
Published
2024-12-16
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.0.7.4 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name
Slug
eventprime-event-calendar-management
Published
2025-03-06
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.0.7.4 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export
Slug
eventprime-event-calendar-management
Published
2025-11-07
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.2.0.1 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation
Slug
eventprime-event-calendar-management
Published
2025-11-06
Title
EventPrime < 4.2.5.0 - Missing Authorization
Slug
eventprime-event-calendar-management
Published
2025-11-06
Title
EventPrime < 4.2.5.0 - Authenticated (Subscriber+) Information Exposure
Slug
eventprime-event-calendar-management
Published
2026-01-12
Title
EventPrime - Events Calendar, Bookings and Tickets < 4.2.8.0 - Unauthenticated Sensitive Information Exposure via REST API
Slug
eventprime-event-calendar-management
Published
2026-01-28
Title
EventPrime < 4.2.8.1 - Missing Authorization