CVE-2023-4252

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Nov 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-425207.5Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client SeCVE-2023-425217.5Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client SeCVE-2023-425227.5Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecuCVE-2023-425237.5Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15CVE-2023-425247.5Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security CVE-2023-425257.5Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security CVE-2023-425267.5Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure ClienCVE-2023-425275.5Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sCVE-2023-425287.8Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to executeCVE-2023-425297.8Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code.CVE-2023-42534.8The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such CVE-2023-425307.5Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct witho
CVE-2023-4252: Medium severity, CVSS 5.3 | Vulnix