Access Control Vulnerability in EventPrime by WordPress
CVE-2026-42669

7.5HIGH

Key Information:

Vendor

WordPress
Status
Eventprime
Vendor
CVE Published:
2 June 2026

What is CVE-2026-42669?

A missing authorization vulnerability in EventPrime allows attackers to exploit incorrectly configured access control security levels. This oversight can enable unauthorized access to sensitive functionalities and data, compromising the overall integrity of the website. Users of EventPrime versions up to 4.3.2.0 should take immediate action to address this issue and secure their installations.

Affected Version(s)

EventPrime <= 4.3.2.0

References

https://patchstack.com/database/wordpress/plugin/eventpri...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Evan NR | Patchstack Bug Bounty Program
.