CVE-2024-8369
EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view private or password-protected events.
Reserved 2024-08-31 | Published 2024-09-10 | Updated 2024-09-10 | Assigner Wordfence| 2024-08-02: | Discovered |
| 2024-09-09: | Disclosed |
Miguel Santareno
www.wordfence.com/...-a2b7-455e-9bf8-b6f51546beee?source=cve
wordpress.org/plugins/eventprime-event-calendar-management/
Support options
