CVE-2023-6447 (published 2024-01-22T19:14:30.115Z)
The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.
Affected products: Vendor: Unknown
Product: EventPrime
Versions: 0