Skip to content
VulnCrestRadar

Search vulnerabilities

Search CVE ids, WordPress plugins or keywords

Report an incidentReport
← Database
CVE-2026-118523

EventPrime < 4.3.6.1

Affected
EventPrime < 4.3.6.1
Patched in
4.3.6.1
CVSS 3.1
5.3 medium
CISA KEV
Not listed
Technical details
Software
EventPrime WP plugin
Weakness
CWE-200
EPSS · 05 Nov 2026
0.21% · p11
Public resources
1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

No VulnCrest analysis published for this CVE yet. Below is the original CNA/NVD description, unmodified.

Description

The EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowing unauthenticated users to view posts, pages and other content that are awaiting review.

Exploits & detection

Detection templateEventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure · nuclei · discovered

Timeline

  • Published: 04 Nov 2026
  • Last modified upstream: 04 Nov 2026

Sources & licenses

CVE / CVSS / CWE
NVD record ↗ (unmodified). This product uses the NVD API but is not endorsed or certified by the NVD. CVE® © The MITRE Corporation.
Exploitation
CISA KEV (CC0) · EPSS by FIRST.org
References used for the analysis
Analysis, summary and remediation
© VulnCrest

View JSON