CVE-2023-6447

PoC —

CVSS 3.1

5.3 medium

EPSS

<1%p45

Published

Jan 22, 2024 (Jan 22, 2024)

Modified

Jun 17, 2026

Description

The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.

Vendors: metagauss
Products: eventprime
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.