PT-2026-20723 · Metagauss · Eventprime

Bao · Publicado 2026-02-19 · Atualizado 2026-02-19 · CVE-2026-25389

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Metagauss EventPrime versions through 4.2.8.3

Description A flaw exists in Metagauss EventPrime eventprime-event-calendar-management that allows retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere.

Recommendations Versions prior to 4.2.8.3 should be updated.

Correção

Enumeração de Fraquezas

CWE-497

Identificadores relacionados

CVE-2026-25389

Produtos afetados

Eventprime

Referências · 3

• https://patchstack.com/database/Wordpress/Plugin/eventprime-event-calendar-management/vulnerability/wordpress-eventprime-plugin-4-2-8-3-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-25389 · Nota de Segurança
• https://twitter.com/CVEnew/status/2024411362412081480 · Publicação no Twitter