GCVE - cpe:2.3:a:unknown:eventprime:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:eventprime:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Eventprime (`b3a1a721-5b88-5ebe-a8e0-6b2994fc0f1c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-4665`	vulnerable	2026-06-08 06:50:18.403026	EventPrime – Events Calendar, Bookings and Tickets < 3.5.0 - Subscriber+ Arbitrary booking settings update The EventPrime WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, allowing users to change/cancel bookings for other users. Additionally, the feature is lacking a nonce. Published: 2025-05-15T20:09:45.830Z Updated: 2025-11-13T21:00:08.476Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/50b78cac-cad1-4526-9655-ae0440739796/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6447`	vulnerable	2026-06-08 06:19:47.393795	EventPrime < 3.3.6 - Unauthenticated Event Access The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name. Published: 2024-01-22T19:14:30.115Z Updated: 2025-06-17T13:38:28.810Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/e366881c-d21e-4063-a945-95e6b080a373/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5519`	vulnerable	2026-06-08 06:19:43.933852	EventPrime < 3.2.0 - Booking Creation via CSRF The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks. Published: 2023-10-31T13:54:44.499Z Updated: 2025-04-23T16:10:12.271Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/ce564628-3d15-4bc5-8b8e-60b71786ac19	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5238`	vulnerable	2026-06-08 06:19:42.958376	EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website. Published: 2023-10-31T13:54:43.838Z Updated: 2025-04-22T20:03:05.795Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/47a5fbfd-f47c-4356-8567-b29dadb48423	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4252`	vulnerable	2026-06-08 06:16:11.926611	EventPrime <= 3.2.9 - Booking Pricing Bypass The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment. Published: 2023-11-27T16:21:59.747Z Updated: 2024-11-21T19:16:17.965Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/d2019e59-db6c-4014-8057-0644c9a00665	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4251`	vulnerable	2026-06-08 06:16:11.926084	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4250`	vulnerable	2026-06-08 06:16:11.924587	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.