Vulnerabilities / EventPrime
EventPrime vulnerabilities
Advisories WPSec published for EventPrime – Events Calendar, Bookings, Tickets & AI. Other sources may list more. Its attack surface: EventPrime on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0341 | EventPrime <= 4.3.4.8 - Unauthenticated Information Exposure of Password-Protected Event Content via REST API and Abilities | Medium 5.3 | 4.3.5.0 |
| 2026-10-02 | WPSEC-2026-0340 | EventPrime <= 4.3.4.8 - Missing Authorization to Unauthenticated Booking and User Account Creation via 'eventprime/create-booking' Ability | Medium 5.3 | 4.3.5.0 |
| 2026-10-02 | WPSEC-2026-0339 | EventPrime <= 4.3.4.8 - Unauthenticated reCAPTCHA Bypass via Login and Registration Forms | Medium 5.3 | 4.3.5.0 |
License: CC BY 4.0