The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Eventprime | Metagauss | * | 3.3.6 (excluding) |