EventPrime – Events Calendar, Bookings and Tickets, CVE-2023-4251

CVE, Research URL: CVE-2023-4251
Home page URL: Security reports for EventPrime – Events Calendar, Bookings and Tickets
Application: EventPrime – Events Calendar, Bookings and Tickets
Published on: Oct 31, 2023
Research Description: The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks.
Affected versions: Min -, max 3.2.0.
Status: vulnerable