| EventPrime – Events Calendar, Bookings, Tickets & AI < 4.3.6.1 - Missing AuthorizationCVE-2026-118523 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings, Tickets & AI <= 4.3.6.0 - Missing AuthorizationCVE-2026-42691 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' ParameterCVE-2026-13441 |
eventprime-event-calendar-management |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 4.3.4.1 - Authenticated (Subscriber+) PHP Object InjectionCVE-2026-56053 |
eventprime-event-calendar-management |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.1 - Unauthenticated PHP Object InjectionCVE-2026-42687 |
eventprime-event-calendar-management |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.1 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-42686 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.0 - Missing AuthorizationCVE-2026-42669 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 4.3.0.0 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-39518 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 4.2.8.0 - Unauthenticated PHP Object InjectionCVE-2026-24378 |
eventprime-event-calendar-management |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 4.2.8.3 - Missing AuthorizationCVE-2026-25312 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 4.2.6.0 - Missing AuthorizationCVE-2025-69358 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime <= 4.2.8.3 - Unauthenticated Information ExposureCVE-2026-25389 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime <= 4.2.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' ParameterCVE-2026-1655 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX EndpointCVE-2026-1657 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime <= 4.2.8.0 - Missing AuthorizationCVE-2026-24380 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST APICVE-2025-14507 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime <= 4.2.4.1 - Missing AuthorizationCVE-2025-63006 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime <= 4.2.4.1 - Authenticated (Subscriber+) Information ExposureCVE-2025-63007 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note CreationCVE-2025-12498 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment BypassCVE-2024-1321 |
eventprime-event-calendar-management |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
