cleantalk
Vulnerabilities and Security Researches

EventPrime – Events Calendar, Bookings and Tickets, CVE-2026-25389

CVE, Research URL

CVE-2026-25389

Published on
Feb 19, 2026
Research Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through <= 4.2.8.3.
Affected versions
max 4.2.8.3.
Status
vulnerable