CVE-2026-118523
EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override
Description
The EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowing unauthenticated users to view posts, pages and other content that are awaiting review.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| n/a | EventPrime | <4.3.6.1 |
References
External links from the record. They lead to third-party sites.