EventPrime vulnerabilities

🔔 Create alert RSS

Published CVEs affecting EventPrime products: 5 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-56053 High · 8.8 CWE-502 Jun 25, 2026

WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.

CVE-2026-42687 High · 8.1 CWE-502 Jun 15, 2026

WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.

CVE-2026-42686 High · 7.1 CWE-79 Jun 15, 2026

WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.

CVE-2026-39518 High · 7.1 CWE-639 Jun 15, 2026

WordPress EventPrime plugin <= 4.3.0.0 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References (IDOR) in EventPrime <= 4.3.0.0 versions.

CVE-2026-42669 High · 7.5 CWE-862 Jun 2, 2026

WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0.