title: EventPrime < 3.3.6 - Unauthenticated Event Access
description: The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.
problem types: CWE-284 Improper Access Control
affected:
{
vendor: Unknown
product: EventPrime
versions:
status: affected, versionType: semver, version: 0, lessThan: 3.3.6
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}