EventPrime
Metagauss
Developer
4.3.1.0
Latest version
7,000
Installations
No date
Last updated
Vulnerability history
0 present
37 patched
16 Mitigation rules
- Payment Bypass vulnerability<= 4.2.8.34 days ago
- PHP Object Injection vulnerability<= 4.2.8.05 days ago
- Broken Access Control vulnerability<= 4.2.6.0Mar 10, 2026
- Sensitive Data Exposure vulnerability<= 4.2.8.3Feb 20, 2026
- Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' Parameter vulnerability<= 4.2.8.4Feb 18, 2026
- Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint vulnerability<= 4.2.8.4Feb 16, 2026
- WordPress EventPrime - Events Calendar, Bookings and Tickets plugin <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion vulnerability<= 3.4.3Feb 3, 2026
- WordPress EventPrime - Events Calendar, Bookings and Tickets plugin <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export vulnerability<= 3.4.1Feb 3, 2026
- Unauthenticated Booking Payment Bypass vulnerability<= 3.4.2Feb 3, 2026
- Unauthenticated Sensitive Information Exposure via REST API vulnerability<= 4.2.7.0Jan 30, 2026
- Broken Access Control vulnerability<= 4.2.8.0Jan 28, 2026
- Missing Authorization to Authenticated (Subscriber+) Booking Note Creation vulnerability<= 4.2.0.0Nov 10, 2025
- Sensitive Data Exposure vulnerability<= 4.2.4.1Nov 6, 2025
- Broken Access Control vulnerability<= 4.2.4.1Nov 6, 2025
- Subscriber+ Arbitrary booking settings update vulnerability< 3.5.0May 19, 2025
- Missing Authorization to Authenticated (Subscriber+) Event Attendees Export vulnerability<= 4.0.7.3Mar 6, 2025
- Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name vulnerability<= 4.0.5.3Dec 16, 2024
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 4.0.4.7Oct 24, 2024
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 4.0.4.7Oct 23, 2024
- Open Redirection vulnerability<= 4.0.4.5Sep 30, 2024
- Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure vulnerability<= 4.0.4.3Sep 10, 2024
- Broken Access Control vulnerability<= 4.0.3.2Aug 9, 2024
- Booking Price Manipulation vulnerability<= 3.3.4Apr 5, 2024
- Cross Site Scripting (XSS) vulnerability<= 3.3.9Mar 25, 2024
- Multiple Missing Authorization vulnerability<= 3.4.1Mar 14, 2024
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 3.4.3Mar 13, 2024
- Multiple Missing Authorization vulnerability<= 3.4.2Mar 11, 2024
- Multiple Missing Authorization vulnerability<= 3.4.3Mar 11, 2024
- Broken Access Control vulnerability<= 3.3.9Feb 2, 2024
- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 3.3.2Nov 23, 2023
- Reflected Cross-Site Scripting (XSS) vulnerability< 3.2.0Oct 31, 2023
- Booking Creation via CSRF vulnerability< 3.2.0Oct 31, 2023
- Reflected HTML Injection on keyword parameter vulnerability< 3.2.0Oct 31, 2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.1.5Oct 11, 2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.0.5Jun 19, 2023
- Sensitive Data Exposure<= 2.8.6May 22, 2023
- Reflected Cross Site Scripting (XSS)<= 2.8.6May 22, 2023