EE
Product
EventPrime – Events Calendar, Bookings and Tickets
17
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 16Low 0
Watch
Add EventPrime – Events Calendar, Bookings and Tickets to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13441 | 7.2 | Jul 9 | EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter Affected: through 4.3.4.2 |
| CVE-2024-1123 | 6.5 | Mar 9 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite Affected: through 3.4.2 |
| CVE-2024-12024 | 6.1 | Dec 17 | EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name Affected: through 4.0.7.3 |
| CVE-2024-9864 | 6.1 | Oct 24 | EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting Affected: through 4.0.4.7 |
| CVE-2024-9865 | 6.1 | Oct 24 | EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting via Transaction Log Affected: through 4.0.4.7 |
| CVE-2024-1320 | 6.1 | Mar 9 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting Affected: through 3.4.3 |
| CVE-2024-1125 | 5.4 | Mar 9 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion Affected: through 3.4.3 |
| CVE-2026-1657 | 5.3 | Feb 17 | EventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint Affected: through 4.2.8.4 |
| CVE-2025-14507 | 5.3 | Jan 13 | EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API Affected: through 4.2.7.0 |
| CVE-2024-8369 | 5.3 | Sep 10 | EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure Affected: through 4.0.4.3 |
| CVE-2024-1321 | 5.3 | Mar 13 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass Affected: through 3.4.2 |
| CVE-2026-1655 | 4.3 | Feb 18 | EventPrime <= 4.2.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' Parameter Affected: through 4.2.8.4 |
| CVE-2025-12498 | 4.3 | Nov 8 | EventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation Affected: through 4.2.0.0 |
| CVE-2024-13526 | 4.3 | Mar 7 | EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export Affected: through 4.0.7.3 |
| CVE-2024-1126 | 4.3 | Mar 13 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval Affected: through 3.4.2 |
| CVE-2024-1127 | 4.3 | Mar 13 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export Affected: through 3.4.1 |
| CVE-2024-1124 | 4.3 | Mar 9 | EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending Affected: through 3.4.3 |
Showing 17