Sensitive Data Exposure in Metagauss EventPrime Calendar Management Plugin

CVE-2026-25389

What is CVE-2026-25389?

The Metagauss EventPrime event calendar management plugin is susceptible to a vulnerability that permits unauthorized access to sensitive system information. This flaw allows attackers to retrieve embedded sensitive data, potentially leading to further exploitation of the affected installations. Websites using EventPrime versions up to and including 4.2.8.3 are encouraged to take prompt action to mitigate this risk, as the exposure of sensitive data can have serious ramifications for user privacy and security.

References