CVE-2024-43223 WordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in EventPrime Events EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 4.0.3.2...

CVE-2024-43223

CVE-2024-43223 is a Missing Authorization vulnerability in EventPrime (WordPress plugin) affecting EventPrime versions up to 4.0.3.2. Public docs confirm susceptibility due to misconfigured access control, with several sources noting the issue and a patch/update exists (4.0.3.2+). Impact is descr...

WordPress EventPrime Plugin <= 4.0.3.2 is vulnerable to Broken Access Control

Software EventPrime Type Plugin Vulnerable versions = 4.0.3.2 Fixed in 4.0.4.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-43223 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 747700064017 Credits Trương Hữu Phúc truonghuuphuc...