Medium severity4.3NVD Advisory· Published Oct 31, 2023· Updated Jun 17, 2026
CVE-2023-4251
CVE-2023-4251
Description
The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/EventPrimedescription
- Range: <3.2.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/ce564628-3d15-4bc5-8b8e-60b71786ac19nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.