Vulnerability CVE-2023-6447


Published: 2024-01-22

Description:
The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.

 References:
https://wpscan.com/vulnerability/e366881c-d21e-4063-a945-95e6b080a373/

Copyright 2026, cxsecurity.com

 

Back to Top