Vulnerabilidades de EventPrime
CVEs publicadas que afetam produtos de EventPrime: 5 registro(s), com severidade, exploração e correções.
CVE-2026-56053
Alta · 8.8
CWE-502 25/06/2026
WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.
CVE-2026-42687
Alta · 8.1
CWE-502 15/06/2026
WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.
CVE-2026-42686
Alta · 7.1
CWE-79 15/06/2026
WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.
CVE-2026-39518
Alta · 7.1
CWE-639 15/06/2026
WordPress EventPrime plugin <= 4.3.0.0 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References (IDOR) in EventPrime <= 4.3.0.0 versions.
CVE-2026-42669
Alta · 7.5
CWE-862 02/06/2026
WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects EventPrime: from n/a through 4.3.2.0.