Skip to contentMetagauss Eventprime – Events Calendar, Bookings And Tickets vulnerabilities
- metagauss eventprime – events calendar, bookings and ticketsEventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' ParameterCVE-2026-134417.2 High
- metagauss eventprime – events calendar, bookings and ticketsEventPrime <= 4.2.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' ParameterCVE-2026-16554.3 Medium
- metagauss eventprime – events calendar, bookings and ticketsEventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX EndpointCVE-2026-1657Public exploit5.3 Medium
- metagauss eventprime – events calendar, bookings and ticketsEventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST APICVE-2025-145075.3 Medium
- metagauss eventprime – events calendar, bookings and ticketsEventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note CreationCVE-2025-124984.3 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees ExportCVE-2024-135264.3 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type NameCVE-2024-120247.2 High
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-98646.1 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting via Transaction LogCVE-2024-98656.1 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events DisclosureCVE-2024-83695.3 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List RetrievalCVE-2024-11264.3 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment BypassCVE-2024-13215.3 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event ExportCVE-2024-11274.3 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post DeletionCVE-2024-11255.4 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-13206.5 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post OverwriteCVE-2024-11236.5 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email SendingCVE-2024-11244.3 Medium
- eventprime – events calendar, bookings and tickets, metagauss eventprime, eventprime – events calendar, bookings and tickets +2 moreWordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)CVE-2023-456377.1 High