CVE-2024-4665

PoC —

CVSS 3.1

6.4 medium

EPSS

<1%p23

Published

May 15, 2025 (May 15, 2025)

Modified

Jun 17, 2026

Description

The EventPrime WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, allowing users to change/cancel bookings for other users. Additionally, the feature is lacking a nonce.

Vendors: metagauss
Products: eventprime
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.