https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T01:51:22.898182+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-1321 CVE-2024-1321 — EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass 2026-10-13T01:51:22.899235+00:00

Affected: metagauss EventPrime – Events Calendar, Bookings and Tickets, metagauss eventprime

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 3.4.2. This is due to the plugin allowing unauthenticated users to update the status of order payments. This makes it possible for unauthenticated attackers to book events for free.