5.3
Moyenne
CVE-2023-6447 The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors…
Description
The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EventPrime 3.3 | premières → < 3.3.6 | 3.3.6 |
Autres CVE de EventPrime
Les 8 CVE de EventPrime →
CVE-2026-118523
EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override
5.3
Moyenne
CVE-2024-4665
The EventPrime WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, allowing…
6.4
Moyenne
CVE-2023-4252
The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an…
Non notée
CVE-2023-4250
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them back in…
6.1
Moyenne