VULNERABILITY INTELLIGENCE

CVE-2023-4252

CVSS score5.3 MEDIUM
EPSS probability0.54%
CISA KEVNot currently listed
Published2023-11-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment.

Primary references