EventPrime – Events Calendar, Bookings and Tickets, CVE-2023-6447

CVE, Research URL: CVE-2023-6447
Home page URL: Security reports for EventPrime – Events Calendar, Bookings and Tickets
Application: EventPrime – Events Calendar, Bookings and Tickets
Published on: Jan 23, 2024
Research Description: The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.
Affected versions: max 3.4.0.
Status: vulnerable