EventPrime
Metagauss
Developer
4.3.4.2
Latest version
7,000
Installations
No date
Last updated
Vulnerability history
0 present
42 patched
20 Mitigation rules
- PHP Object Injection vulnerability<= 4.3.4.17 days ago
- PHP Object Injection vulnerability<= 4.3.2.125/05/2026
- Cross Site Scripting (XSS) vulnerability<= 4.3.2.124/05/2026
- Broken Access Control vulnerability<= 4.3.2.012/05/2026
- Insecure Direct Object References (IDOR) vulnerability<= 4.3.0.020/04/2026
- Payment Bypass vulnerability<= 4.2.8.318/03/2026
- PHP Object Injection vulnerability<= 4.2.8.017/03/2026
- Broken Access Control vulnerability<= 4.2.6.010/03/2026
- Sensitive Data Exposure vulnerability<= 4.2.8.320/02/2026
- Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' Parameter vulnerability<= 4.2.8.418/02/2026
- Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint vulnerability<= 4.2.8.416/02/2026
- WordPress EventPrime - Events Calendar, Bookings and Tickets plugin <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion vulnerability<= 3.4.303/02/2026
- WordPress EventPrime - Events Calendar, Bookings and Tickets plugin <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export vulnerability<= 3.4.103/02/2026
- Unauthenticated Booking Payment Bypass vulnerability<= 3.4.203/02/2026
- Unauthenticated Sensitive Information Exposure via REST API vulnerability<= 4.2.7.030/01/2026
- Broken Access Control vulnerability<= 4.2.8.028/01/2026
- Missing Authorization to Authenticated (Subscriber+) Booking Note Creation vulnerability<= 4.2.0.010/11/2025
- Sensitive Data Exposure vulnerability<= 4.2.4.106/11/2025
- Broken Access Control vulnerability<= 4.2.4.106/11/2025
- Subscriber+ Arbitrary booking settings update vulnerability< 3.5.019/05/2025
- Missing Authorization to Authenticated (Subscriber+) Event Attendees Export vulnerability<= 4.0.7.306/03/2025
- Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name vulnerability<= 4.0.5.316/12/2024
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 4.0.4.724/10/2024
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 4.0.4.723/10/2024
- Open Redirection vulnerability<= 4.0.4.530/09/2024
- Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure vulnerability<= 4.0.4.310/09/2024
- Broken Access Control vulnerability<= 4.0.3.209/08/2024
- Booking Price Manipulation vulnerability<= 3.3.405/04/2024
- Cross Site Scripting (XSS) vulnerability<= 3.3.925/03/2024
- Multiple Missing Authorization vulnerability<= 3.4.114/03/2024
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 3.4.313/03/2024
- Multiple Missing Authorization vulnerability<= 3.4.211/03/2024
- Multiple Missing Authorization vulnerability<= 3.4.311/03/2024
- Broken Access Control vulnerability<= 3.3.902/02/2024
- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 3.3.223/11/2023
- Reflected Cross-Site Scripting (XSS) vulnerability< 3.2.031/10/2023
- Booking Creation via CSRF vulnerability< 3.2.031/10/2023
- Reflected HTML Injection on keyword parameter vulnerability< 3.2.031/10/2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.1.511/10/2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.0.519/06/2023
- Sensitive Data Exposure<= 2.8.622/05/2023
- Reflected Cross Site Scripting (XSS)<= 2.8.622/05/2023