CVE-2023-6447: Metagauss Eventprime

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name.

Affected products

• Metagauss Eventprime: before 3.3.6 (fixed in 3.3.6)

Published 2024-01-22. Last modified 2026-06-17.