The EventPrime WordPress plugin prior to 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
metagauss eventprime |
Vulmon