CVE-2026-1657 | EventPrime Plugin up to 4.2.8.4 on WordPress AJAX Endpoint ep_upload_file_media authorization

February 16, 2026 Yanac

A vulnerability, which was classified as critical, was found in EventPrime Plugin up to 4.2.8.4 on WordPress. This affects the function ep_upload_file_media of the component AJAX Endpoint. Executing a manipulation can lead to missing authorization.

This vulnerability is tracked as CVE-2026-1657. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More