The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.
| Software | From | Fixed in |
|---|---|---|
| metagauss / eventprime | - | 3.3.6 |