{"affected":[{"defaultStatus":"unaffected","product":"EventPrime","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"4.3.6.1","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118523","cwes":["CWE-200"],"description":"The EventPrime  WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowing unauthenticated users to view posts, pages and other content that are awaiting review.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/d3cdae3c-79a4-4daf-8fe4-b03cd589beb4/"}],"kev":null,"metrics":[],"modifiedAt":1793772028433,"publishedAt":1793772028433,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/d3cdae3c-79a4-4daf-8fe4-b03cd589beb4/"}],"remediation":[],"revision":"32b234b220bb47aff1d6a30d57182a1f8172c858194ad029fd0eb46559cbef6f","sources":[{"modifiedAt":1793772028433,"name":"CNA: WPScan","retrievedAt":1793776146740,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118523"}],"ssvc":null,"status":"published","title":"EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override","updatedAt":1793776146740}