CVE-2023-4252 — EventPrime <= 3.2.9 - Booking Pricing Bypass
The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment.
Published: 2023-11-27 · CVSS: Unscored
The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7