Medium severity5.3NVD Advisory· Published Mar 13, 2024· Updated Apr 8, 2026
CVE-2024-1321
CVE-2024-1321
Description
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 3.4.2. This is due to the plugin allowing unauthenticated users to update the status of order payments. This makes it possible for unauthenticated attackers to book events for free.
Affected products
2- Range: <=3.4.2
Patches
Vulnerability mechanics
References
2- plugins.trac.wordpress.org/changesetnvdPatch
- www.wordfence.com/threat-intel/vulnerabilities/id/765d0933-8db2-471c-ad4e-e19d3b4ff015nvdThird Party Advisory
News mentions
0No linked articles in our index yet.