CVE-2023-33321mediumCWE-862

CVE-2023-33321: medium-severity vulnerability in Metagauss EventPrime

WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure

Published · Updated

Follow this CVE+ Monitor EventPrime

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.5%
In short

The EventPrime WordPress plugin version 2.8.6 and earlier fails to properly check user permissions before allowing access to sensitive information. An attacker can view private event data without proper authorization.

Technical detail

CWE-862 (Missing Authorization) in EventPrime <= 2.8.6 allows unauthenticated or low-privileged users to access sensitive event data through incorrectly configured access control mechanisms. The vulnerability stems from missing permission validation on API endpoints or admin functions that expose event information. Exploitation requires network access to the vulnerable WordPress installation.

Summary generated and translated by AI from the official description.
Missing Authorization vulnerability in Metagauss EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 2.8.6.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Metagauss · EventPrime
Related CVEs — Metagauss EventPrime

In the same product, most dangerous first.

CVE-2026-24378CRITICALWordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2024-31275HIGHWordPress EventPrime plugin <= 3.3.4 - Booking Price Manipulation vulnerabilityEPSS 0.5%CVE-2024-24832HIGHWordPress EventPrime plugin <= 3.3.9 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-29776MEDIUMWordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-69358HIGHWordPress EventPrime plugin <= 4.2.6.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-25389MEDIUMWordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerabilityEPSS 0.3%