Medium
CVE-2024-43223
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 45
Reset filters
Medium
CVE-2024-31275
EventPrime <= 3.3.4 - Missing Authorization to Booking Price Maniputlation
Medium
CVE-2024-29776
EventPrime <= 3.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1125
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2024-1320
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1321
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass
Medium
CVE-2024-1123
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite
Medium
CVE-2024-1124
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Medium
CVE-2024-1126
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval
Medium
CVE-2024-1127
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export
Medium
CVE-2024-24832
EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking
Medium
CVE-2023-6447
EventPrime <= 3.3.5 - Missing Authorization to Private Event Disclosure
Medium
5124be64-6679-4dc5-8117-55c73ae91489
EventPrime – Modern Events Calendar, Bookings and Tickets <= 3.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4252
EventPrime <= 3.3.2 - Improper Server-Side Checks to Booking Payment Bypass
Medium
CVE-2023-45637
EventPrime <= 3.1.5 - Reflected Cross-Site Scripting via 'event_id'
Medium
CVE-2023-5238
EventPrime < 3.2.0 - Reflected HTML Content Injection
Medium
CVE-2023-4251
EventPrime < 3.2.0 - Cross-Site Request Forgery
Medium
CVE-2023-4250
EventPrime < 3.2.0 - Reflected Cross-Site Scripting via keyword and ep_filter_date
Medium
CVE-2023-33326
EventPrime <= 2.8.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-33321
EventPrime <= 2.8.6 - Sensitive Information Exposure
Medium
CVE-2023-35884
EventPrime <= 3.0.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.