Skip to content
PluginCanary

EventPrime - Events Calendar, Bookings, Tickets & AI

by Metagauss · 7,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 29 Oct 2026, fixed in 4.3.6.1.

82/ 100 Canary Score
Sub-scores for EventPrime - Events Calendar, Bookings, Tickets & AI
Ownership100
Maintenance100
Security60
Support75
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 4.3.6.1. Update to version 4.3.6.1 or later.29 Oct 2026Evidence
  • InfoSEC-320 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master19 Feb 2019 to 19 Feb 2019, 1 commits
metagauss28 Feb 2019 to 31 Oct 2026, 522 commits
eventprime8 May 2019 to 20 Aug 2019, 15 commits
profilegrid012 Oct 2023 to 9 Jan 2024, 12 commits

4 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
4 days ago
Releases, 24 months
84
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter for EventPrime - Events Calendar, Bookings, Tickets & AI
Q1 20247
Q2 202411
Q3 202410
Q4 202412
Q1 20258
Q2 202510
Q3 202513
Q4 202514
Q1 202612
Q2 20268
Q3 20266
Q4 20265

Last release 31 Oct 2026. Tested with WordPress 7.1 (current).

Support

75% of 12 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026EventPrime – Events Calendar, Bookings, Tickets & AI <= 4.3.6.0 - Missing Authorization4.3<= 4.3.6.04.3.6.10
8 Jul 2026EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter7.2<= 4.3.4.24.3.4.30
25 Jun 2026EventPrime – Events Calendar, Bookings and Tickets <= 4.3.4.1 - Authenticated (Subscriber+) PHP Object Injection7.5<= 4.3.4.14.3.4.20
25 May 2026EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.1 - Unauthenticated PHP Object Injection8.1<= 4.3.2.14.3.2.20
24 May 2026EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 4.3.2.14.3.2.20
12 May 2026EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.0 - Missing Authorization5.3<= 4.3.2.04.3.2.10
20 Apr 2026EventPrime – Events Calendar, Bookings and Tickets <= 4.3.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3<= 4.3.0.04.3.0.10
18 Mar 2026EventPrime – Events Calendar, Bookings and Tickets <= 4.2.8.3 - Missing Authorization5.3<= 4.2.8.34.2.8.40
17 Mar 2026EventPrime – Events Calendar, Bookings and Tickets <= 4.2.8.0 - Unauthenticated PHP Object Injection8.1<= 4.2.8.04.2.8.10
10 Mar 2026EventPrime – Events Calendar, Bookings and Tickets <= 4.2.6.0 - Missing Authorization5.3<= 4.2.6.04.2.7.00
20 Feb 2026EventPrime <= 4.2.8.3 - Unauthenticated Information Exposure5.3<= 4.2.8.34.2.8.40
17 Feb 2026EventPrime <= 4.2.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' Parameter4.3<= 4.2.8.44.2.8.50
16 Feb 2026EventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint5.3<= 4.2.8.44.2.8.50
28 Jan 2026EventPrime <= 4.2.8.0 - Missing Authorization5.3<= 4.2.8.04.2.8.10
12 Jan 2026EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API5.3<= 4.2.7.04.2.8.00
7 Nov 2025EventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation4.3<= 4.2.0.04.2.0.10
6 Nov 2025EventPrime <= 4.2.4.1 - Authenticated (Subscriber+) Information Exposure4.3<= 4.2.4.14.2.5.034
6 Nov 2025EventPrime <= 4.2.4.1 - Missing Authorization5.3<= 4.2.4.14.2.5.034
6 Mar 2025EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export4.3<= 4.0.7.34.0.7.40
16 Dec 2024EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name7.2<= 4.0.7.34.0.7.437
29 Oct 2024EventPrime – Events Calendar, Bookings and Tickets <= 3.5.0 - Insecure Direct Object Reference to (Subscriber+) Arbitrary Booking Update4.3<= 3.4.93.5.00
23 Oct 2024EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting via Transaction Log6.1<= 4.0.4.74.0.4.80
23 Oct 2024EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting6.1<= 4.0.4.74.0.4.80
30 Sep 2024EventPrime <= 4.0.4.5 - Open Redirect6.1<= 4.0.4.54.0.4.65
9 Sep 2024EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure5.3<= 4.0.4.34.0.4.40

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.4 from 85 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star68
4 star5
3 star1
2 star3
1 star8

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for EventPrime - Events Calendar, Bookings, Tickets & AI
4 May 2026570
11 May 20264,765
18 May 20265,261
25 May 20261,478
1 Jun 20263,277
8 Jun 20262,224
15 Jun 20263,470
22 Jun 20262,388
29 Jun 20264,305
6 Jul 20265,335
13 Jul 20261,869
20 Jul 20264,472
27 Jul 20261,154
3 Aug 20261,333
10 Aug 20265,020
17 Aug 20265,101
24 Aug 20261,203
31 Aug 20264,496
7 Sep 20261,330
14 Sep 20261,421
21 Sep 20261,077
28 Sep 20264,554
5 Oct 20265,542
12 Oct 20261,166
19 Oct 20264,708
26 Oct 20269,832
2 Nov 2026466

Weekly downloads over the last 4 weeks are 24% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Events Shortcodes For The Events CalendarScore 92 · 10,000+Events Widgets For Elementor And The Events CalendarScore 91 · 10,000+Sugar Calendar - Events Calendar, Event Tickets, and Events Management PlatformScore 91 · 10,000+The Events Calendar Shortcode & BlockScore 91 · 10,000+Ticket Tailor - Event Ticketing & RegistrationScore 91 · 4,000+

Facts

Version4.3.7.0
AuthorMetagauss
Added28 Feb 2019
Last updated31 Oct 2026
Active installs7,000+
Requires WordPress4.8
Tested up to7.1.4
Requires PHP7.2
CategoryBookings & Scheduling > Event Management & Ticketing
TagsEvent, events, event manager, event calendar, event organizer

Other plugins by this author: Download Plugin, RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login, ProfileGrid - User Profiles, Groups and Communities, Download Theme, Themeflection Numbers - Number Counter and Animated Numbers, Memberships and User Profiles for WooCommerce - ProfileGrid WooCommerce Integration, Blog Post Sidebar

Questions

Is EventPrime - Events Calendar, Bookings, Tickets & AI still maintained?

EventPrime - Events Calendar, Bookings, Tickets & AI was last updated on 31 Oct 2026. Its Canary status is Healthy.

Is EventPrime - Events Calendar, Bookings, Tickets & AI safe?

EventPrime - Events Calendar, Bookings, Tickets & AI has no open unpatched vulnerabilities on record. 20 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns EventPrime - Events Calendar, Bookings, Tickets & AI?

The wordpress.org author is Metagauss. Recent committers: metagauss, profilegrid0, eventprime, plugin-master. We have recorded no ownership change.

What can I use instead of EventPrime - Events Calendar, Bookings, Tickets & AI?

Plugins in the same category with a higher Canary Score: Events Shortcodes For The Events Calendar, Events Widgets For Elementor And The Events Calendar, Sugar Calendar - Events Calendar, Event Tickets, and Events Management Platform, The Events Calendar Shortcode & Block, Ticket Tailor - Event Ticketing & Registration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue