https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T17:50:14.010833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288563 EUVD-2026-288563 2026-10-23T17:50:14.076483+00:00 EUVD-2026-288563 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12498 fkie_cve-2025-12498 2026-10-23T17:50:14.076523+00:00

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized booking note creation due to a missing capability check on the 'booking_add_notes' function in all versions up to, and including, 4.2.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add a note to the backend view of any booking.

 https://cve.radiocsirt.org/vuln/ghsa-4mg2-rgw7-wvrm GHSA-4mg2-rgw7-wvrm 2026-10-23T17:50:14.076558+00:00

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized booking note creation due to a missing capability check on the 'booking_add_notes' function in all versions up to, and including, 4.2.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add a note to the backend view of any booking.