Event Prime – Events Calendar, Bookings and Tickets

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 71% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ Anonymous

   2mo ago

   It took me a while to get used to this plugin’s nuances, but with help from the online forum and EventPrime support staff, I’m now flying. This has completely revolutionised the way we promote and manage our events. Thanks to the team!

   Read on wp.org ↗
2. ★★★★★ gerard68

   3mo ago

   As swimmingschool De Bevelanders we where looking for a new web calendar for our site, and we found it with EventPrime. Great and easy to use!

   Read on wp.org ↗
3. ★★★★★ parsimei

   4mo ago

   Very good customer support. Highly recommend it .

   Read on wp.org ↗
4. ★★★★★ webregie

   4mo ago

   I purchased the premium version and can use all the additional features. Support is very good, albeit with a slight delay. The plugin is highly customizable and is likely very well suited for my needs in the long term. I will report on how it performs in the long term. The developer will surely implement many more improvements.

   Read on wp.org ↗
5. ★★★★★ ozzie41

   5mo ago

   The plugin is very useful, every detail has been carefully thought out. I couldn’t make a ranking and the support team was very helpful. I even created an admin user and they intervened directly by connecting to the site. I sincerely appreciate their work.

   Read on wp.org ↗
6. ★★★★★ danialdy

   5mo ago

   Have flexible functions to meet the requirements in event management use cases. Need to study and research all the model and features, more easier after that.

   Read on wp.org ↗
7. ★★★★★ florianz37

   5mo ago

   We’re a volunteer theater company located in Germany. For some of our productions we handle ticket sales ourselves. This amounts to about 10 events per year, with audiences of 200 to 600 people at various venues. We were therefore looking for management software, that would meet our needs, and ended up with Eventprime (Business package). Our requirements and the features that made Eventprime stand out to us included:– the option to pay for tickets by bank transfer as well as via common online payment services– ability for customers to select their seats using a seating plan– confirmation of the privacy policy and terms and conditions during ordering process– attractive design and user interface– generation and distribution of digital tickets as PDF files– well-explained and comprehensive online documentation of features and functionality In addition, we’ve used the customization service twice. This now allows us to assign multiple price categories per seat in the seating chart (e.g., adults and children). Surprisingly, this feature wasn’t available in any of the numerous Eventprime extensions included in the Business plan. The support, the coordination, and the results were professional at all times. Follow-up inquiries and corrections were handled promptly. Summary:A tool that can be highly customized to meet individual needs, dedicated support, and a wide range of features make Eventprime a top recommendation for theater groups, creative ensembles, and choirs (among others) who want to keep full control and prefer not to outsource ticket sales to event service providers in exchange for sales fees.We successfully used the plugin and several extensions last year and look forward to continuing to do so. @metagauss team: Thank you, and keep up the great work.

   Read on wp.org ↗
8. ★★★★★ ishathind

   6mo ago

   EventPrime has been a great addition to our WordPress site. Setting up events is quick and the layout looks clean and professional right out of the box. The plugin includes many useful features like event calendars, registrations, and ticket management, which makes organizing events much easier. Everything feels well thought out and practical for real use. Overall, it’s a reliable and user-friendly plugin that does exactly what you need for managing events on WordPress. Definitely recommended.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.3.4.5 Fixed: Weather API issue. 4.3.4.5
2. — Version 4.3.4.4 Multiple bug fixes. 4.3.4.4
3. — Version 4.3.4.3 Added: Security fixes. 4.3.4.3
4. — Version 4.3.4.2 Added: Security fixes. Multiple bug fixes. 4.3.4.2
5. — Version 4.3.4.1 Fixed: Minor UI fixes. 4.3.4.1
6. — Version 4.3.4.0 Tested with WordPress 7.0. Fixed frontend event submission rendering and access issues. Fixed single-event booking and checkout flow issues. Fixed checkout warnings caused by missing event property defaults. Improved ove 4.3.4.0

45 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter ↗
   2026-07-08 CVE-2026-13441 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.3.4.2 Patched in 4.3.4.3
2. High · 7.5 EventPrime – Events Calendar, Bookings and Tickets <= 4.3.4.1 - Authenticated (Subscriber+) PHP Object Injection ↗
   2026-06-25 CVE-2026-56053 Deserialization of Untrusted Data Affects <= 4.3.4.1 Patched in 4.3.4.2
3. High · 8.1 EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.1 - Unauthenticated PHP Object Injection ↗
   2026-05-25 CVE-2026-42687 Deserialization of Untrusted Data Affects <= 4.3.2.1 Patched in 4.3.2.2
4. Medium · 6.4 EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2026-05-24 CVE-2026-42686 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.3.2.1 Patched in 4.3.2.2
5. Medium · 5.3 EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.0 - Missing Authorization ↗
   2026-05-12 CVE-2026-42669 Missing Authorization Affects <= 4.3.2.0 Patched in 4.3.2.1
6. Medium · 4.3 EventPrime – Events Calendar, Bookings and Tickets <= 4.3.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
   2026-04-20 CVE-2026-39518 Authorization Bypass Through User-Controlled Key Affects <= 4.3.0.0 Patched in 4.3.0.1
7. Medium · 5.3 EventPrime – Events Calendar, Bookings and Tickets <= 4.2.8.3 - Missing Authorization ↗
   2026-03-18 CVE-2026-25312 Missing Authorization Affects <= 4.2.8.3 Patched in 4.2.8.4
8. High · 8.1 EventPrime – Events Calendar, Bookings and Tickets <= 4.2.8.0 - Unauthenticated PHP Object Injection ↗
   2026-03-17 CVE-2026-24378 Deserialization of Untrusted Data Affects <= 4.2.8.0 Patched in 4.2.8.1
9. Medium · 5.3 EventPrime – Events Calendar, Bookings and Tickets <= 4.2.6.0 - Missing Authorization ↗
   2026-03-10 CVE-2025-69358 Missing Authorization Affects <= 4.2.6.0 Patched in 4.2.7.0
10. Medium · 5.3 EventPrime <= 4.2.8.3 - Unauthenticated Information Exposure ↗
    2026-02-20 CVE-2026-25389 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.2.8.3 Patched in 4.2.8.4
11. Medium · 4.3 EventPrime <= 4.2.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' Parameter ↗
    2026-02-17 CVE-2026-1655 Missing Authorization Affects <= 4.2.8.4 Patched in 4.2.8.5
12. Medium · 5.3 EventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint ↗
    2026-02-16 CVE-2026-1657 Missing Authorization Affects <= 4.2.8.4 Patched in 4.2.8.5
13. Medium · 5.3 EventPrime <= 4.2.8.0 - Missing Authorization ↗
    2026-01-28 CVE-2026-24380 Missing Authorization Affects <= 4.2.8.0 Patched in 4.2.8.1
14. Medium · 5.3 EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API ↗
    2026-01-12 CVE-2025-14507 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.2.7.0 Patched in 4.2.8.0
15. Medium · 4.3 EventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation ↗
    2025-11-07 CVE-2025-12498 Missing Authorization Affects <= 4.2.0.0 Patched in 4.2.0.1
16. Medium · 4.3 EventPrime <= 4.2.4.1 - Authenticated (Subscriber+) Information Exposure ↗
    2025-11-06 CVE-2025-63007 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.2.4.1 Patched in 4.2.5.0
17. Medium · 5.3 EventPrime <= 4.2.4.1 - Missing Authorization ↗
    2025-11-06 CVE-2025-63006 Missing Authorization Affects <= 4.2.4.1 Patched in 4.2.5.0
18. Medium · 4.3 EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export ↗
    2025-03-06 CVE-2024-13526 Missing Authorization Affects <= 4.0.7.3 Patched in 4.0.7.4
19. High · 7.2 EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name ↗
    2024-12-16 CVE-2024-12024 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.0.7.3 Patched in 4.0.7.4
20. Medium · 4.3 EventPrime – Events Calendar, Bookings and Tickets <= 3.5.0 - Insecure Direct Object Reference to (Subscriber+) Arbitrary Booking Update ↗
    2024-10-29 CVE-2024-4665 Authorization Bypass Through User-Controlled Key Affects <= 3.4.9 Patched in 3.5.0
21. Medium · 6.1 EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting via Transaction Log ↗
    2024-10-23 CVE-2024-9865 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.0.4.7 Patched in 4.0.4.8
22. Medium · 6.1 EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting ↗
    2024-10-23 CVE-2024-9864 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.0.4.7 Patched in 4.0.4.8
23. Medium · 6.1 EventPrime <= 4.0.4.5 - Open Redirect ↗
    2024-09-30 CVE-2024-47648 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 4.0.4.5 Patched in 4.0.4.6
24. Medium · 5.3 EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure ↗
    2024-09-09 CVE-2024-8369 Missing Authorization Affects <= 4.0.4.3 Patched in 4.0.4.4
25. Medium · 5.3 EventPrime <= 4.0.3.2 - Missing Authorization via calendar_event_create() ↗
    2024-08-09 CVE-2024-43223 Missing Authorization Affects <= 4.0.3.2 Patched in 4.0.4.0
26. Medium · 5.3 EventPrime <= 3.3.4 - Missing Authorization to Booking Price Maniputlation ↗
    2024-04-05 CVE-2024-31275 External Control of Assumed-Immutable Web Parameter Affects <= 3.3.4 Patched in 3.3.5
27. Medium · 5.5 EventPrime <= 3.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-03-25 CVE-2024-29776 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.9 Patched in 3.4.0
28. Medium · 4.3 EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending ↗
    2024-03-08 CVE-2024-1124 Missing Authorization Affects <= 3.4.3 Patched in 3.4.4
29. Medium · 6.5 EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite ↗
    2024-03-08 CVE-2024-1123 Missing Authorization Affects <= 3.4.2 Patched in 3.4.3
30. Medium · 5.3 EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass ↗
    2024-03-08 CVE-2024-1321 Insufficient Verification of Data Authenticity Affects <= 3.4.2 Patched in 3.4.3
31. Medium · 6.5 EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting ↗
    2024-03-08 CVE-2024-1320 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.4.3 Patched in 3.4.4
32. Medium · 5.4 EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion ↗
    2024-03-08 CVE-2024-1125 Missing Authorization Affects <= 3.4.3 Patched in 3.4.4
33. Medium · 4.3 EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export ↗
    2024-02-14 CVE-2024-1127 Missing Authorization Affects <= 3.4.1 Patched in 3.4.2
34. Medium · 4.3 EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval ↗
    2024-02-14 CVE-2024-1126 Missing Authorization Affects <= 3.4.2 Patched in 3.4.3
35. Medium · 5.3 EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking ↗
    2024-02-02 CVE-2024-24832 Improper Input Validation Affects <= 3.3.9 Patched in 3.4.0
36. Medium · 5.3 EventPrime <= 3.3.5 - Missing Authorization to Private Event Disclosure ↗
    2023-12-29 CVE-2023-6447 Missing Authorization Affects <= 3.3.5 Patched in 3.3.6
37. Medium · 6.4 EventPrime – Modern Events Calendar, Bookings and Tickets <= 3.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-11-21 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.2 Patched in 3.3.3
38. Medium · 5.3 EventPrime <= 3.3.2 - Improper Server-Side Checks to Booking Payment Bypass ↗
    2023-10-30 CVE-2023-4252 Improper Validation of Specified Quantity in Input Affects <= 3.3.2 Patched in 3.3.3
39. Medium · 6.1 EventPrime <= 3.1.5 - Reflected Cross-Site Scripting via 'event_id' ↗
    2023-10-11 CVE-2023-45637 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.5 Patched in 3.1.6
40. Medium · 6.1 EventPrime < 3.2.0 - Reflected Cross-Site Scripting via keyword and ep_filter_date ↗
    2023-10-09 CVE-2023-4250 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.2.0 Patched in 3.2.0
41. Medium · 4.3 EventPrime < 3.2.0 - Cross-Site Request Forgery ↗
    2023-10-09 CVE-2023-4251 Cross-Site Request Forgery (CSRF) Affects < 3.2.0 Patched in 3.2.0
42. Medium · 4.3 EventPrime < 3.2.0 - Reflected HTML Content Injection ↗
    2023-10-09 CVE-2023-5238 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Affects < 3.2.0 Patched in 3.2.0
43. Medium · 6.1 EventPrime <= 3.0.5 - Reflected Cross-Site Scripting ↗
    2023-05-22 CVE-2023-35884 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.5 Patched in 3.0.6
44. Medium · 5.3 EventPrime <= 2.8.6 - Sensitive Information Exposure ↗
    2023-05-22 CVE-2023-33321 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.8.6 Patched in 3.0.0
45. Medium · 6.1 EventPrime <= 2.8.6 - Reflected Cross-Site Scripting ↗
    2023-05-22 CVE-2023-33326 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.6 Patched in 3.0.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 17 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-15 8K+ → 7K+ down after 15 days in tier
2. 2026-05-31 7K+ → 8K+ up after 3 days in tier
3. 2026-05-28 8K+ → 7K+ down after 4 days in tier
4. 2026-05-24 7K+ → 8K+ up after 3 days in tier
5. 2026-05-21 8K+ → 7K+ down after 2 days in tier
6. 2026-05-19 7K+ → 8K+ up after 1 days in tier
7. 2026-05-18 8K+ → 7K+ down after 2 days in tier
8. 2026-05-16 7K+ → 8K+ up after 2 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Quick Event Manager 1K+ installs · 4.7★ · 3 shared tags B
• Event Monster – Event Manager, Event Booking, Event Ticket & Registration 600+ installs · 4.5★ · 3 shared tags A
• WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce 20K+ installs · 4.0★ · 2 shared tags A
• My Calendar – Accessible Event Manager 20K+ installs · 4.6★ · 2 shared tags A
• Events Search & Filter Bar for The Events Calendar 3K+ installs · 4.5★ · 2 shared tags A
• Event Tickets Manager for WooCommerce 1K+ installs · 4.5★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Event Prime – Events Calendar, Bookings and Tickets into a readme, a review or a deck. It updates itself.

Event Prime – Events Calendar, Bookings and Tickets: 7K+ active installs, 4.5★ (84 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/eventprime-event-calendar-management