Vulnerability — CVE-2023-6447

CVE-2023-6447

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-6447
Description:: The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.
Last updated date:: 01/26/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 01/26/2024
Reference url to background: https://wpscan.com/vulnerability/e366881c-d21e-4063-a945-95e6b080a373/