WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eventprime-event-calendar-management
Published
2024-10-23
Title
EventPrime – Modern Events Calendar, Bookings and Tickets < 4.0.4.8 - Unauthenticated Stored Cross-Site Scripting via Transaction Log
Slug
eventprime-event-calendar-management
Published
2024-10-23
Title
EventPrime – Modern Events Calendar, Bookings and Tickets < 4.0.4.8 - Unauthenticated Stored Cross-Site Scripting
Slug
eventprime-event-calendar-management
Published
2024-04-23
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.5.0 - Subscriber+ Arbitrary booking settings update
Slug
eventprime-event-calendar-management
Published
2024-12-16
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.0.7.4 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name
Slug
eventprime-event-calendar-management
Published
2025-03-06
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.0.7.4 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export
Slug
eventprime-event-calendar-management
Published
2025-11-07
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.2.0.1 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation
Slug
eventprime-event-calendar-management
Published
2025-11-06
Title
EventPrime < 4.2.5.0 - Missing Authorization
Slug
eventprime-event-calendar-management
Published
2025-11-06
Title
EventPrime < 4.2.5.0 - Authenticated (Subscriber+) Information Exposure
Slug
eventprime-event-calendar-management
Published
2026-01-12
Title
EventPrime - Events Calendar, Bookings and Tickets < 4.2.8.0 - Unauthenticated Sensitive Information Exposure via REST API
Slug
eventprime-event-calendar-management
Published
2026-01-28
Title
EventPrime < 4.2.8.1 - Missing Authorization
Slug
eventprime-event-calendar-management
Published
2026-02-16
Title
EventPrime < 4.2.8.5 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint
Slug
eventprime-event-calendar-management
Published
2026-02-17
Title
EventPrime < 4.2.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' Parameter
Slug
eventprime-event-calendar-management
Published
2026-02-20
Title
EventPrime < 4.2.8.4 - Unauthenticated Information Exposure
Slug
eventprime-event-calendar-management
Published
2026-03-10
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.2.7.0 - Missing Authorization
Slug
eventprime-event-calendar-management
Published
2026-03-18
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.2.8.4 - Missing Authorization
Slug
eventprime-event-calendar-management
Published
2026-03-17
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.2.8.1 - Unauthenticated PHP Object Injection
Slug
eventprime-event-calendar-management
Published
2026-04-20
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.3.0.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
eventprime-event-calendar-management
Published
2026-05-12
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.3.2.1 - Missing Authorization
Slug
eventprime-event-calendar-management
Published
2026-05-24
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.3.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
eventprime-event-calendar-management
Published
2026-05-25
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.3.2.2 - Unauthenticated PHP Object Injection
Slug
eventprime-event-calendar-management
Published
2026-06-25
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.3.4.2 - Authenticated (Subscriber+) PHP Object Injection
Slug
eventprime-event-calendar-management
Published
2026-07-08
Title
EventPrime < 4.3.4.3 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter
Slug
eventr
Published
2017-05-31
Title
eventr 1.02.2 - Blind SQL Injection
Slug
events-addon-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
events-addon-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting