Approved changes feed: RSS · Atom

cpe:2.3:a:eventprime:eventprime:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEventprime (d879f12f-3493-522a-9562-0be65664e15e)
ProductEventprime (645fa521-40ae-5fe5-9ce5-3e9769524bbd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-56053 vulnerable 2026-07-29 01:00:28.817527 WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability
HIGH (8.8)
Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.
Published: 2026-06-25T13:12:42.844Z
Updated: 2026-06-25T23:23:16.436Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42687 vulnerable 2026-07-29 00:49:32.159341 WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability
HIGH (8.1)
Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.
Published: 2026-06-15T20:18:48.391Z
Updated: 2026-06-16T01:24:02.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42686 vulnerable 2026-07-29 00:49:32.159178 WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.
Published: 2026-06-15T20:18:47.734Z
Updated: 2026-06-16T01:24:15.641Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42669 vulnerable 2026-06-08 08:03:16.587712 WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability
HIGH (7.5)
Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EventPrime: from n/a through 4.3.2.0.
Published: 2026-06-02T10:40:24.435Z
Updated: 2026-06-02T12:11:07.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25312 vulnerable 2026-06-08 07:53:19.629882 WordPress EventPrime plugin <= 4.2.8.3 - Payment Bypass vulnerability
HIGH (7.5)
Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through <= 4.2.8.3.
Published: 2026-03-19T07:20:59.799Z
Updated: 2026-04-29T09:51:56.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35884 vulnerable 2026-06-08 06:06:28.050256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33326 vulnerable 2026-06-08 06:06:22.327639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.