PatchTheCVEeventprime vulnerabilities and fixes
Recent CVEs affecting eventprime, with upgrade or downgrade steps. 8 tracked.
eventprime has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-05-15. Highest priority: CVE-2024-12024 (score 39/100).
- CVE-2024-9865 MEDIUM 6.1 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site
- CVE-2024-9864 MEDIUM 6.1 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site
- CVE-2024-8369 MEDIUM 5.3 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized acce
- CVE-2024-4665 MEDIUM 6.4 UPGRADE The EventPrime WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, al
- CVE-2024-47648 MEDIUM 4.7 UPGRADE URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Metagauss EventPrime eventprime-event-cal
- CVE-2024-43223 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in EventPrime Events EventPrime allows Exploiting Incorrectly Configured A
- CVE-2024-13526 MEDIUM 4.3 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized acce
- CVE-2024-12024 HIGH 7.2 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site
FAQ
How do I fix eventprime vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eventprime being exploited right now?
None of the tracked eventprime CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eventprime CVE should I patch first?
CVE-2024-12024 currently ranks highest (39/100): The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site.