{"id":"CVE-2026-118523","published":"2026-11-04T06:17:03.203","lastModified":"2026-11-04T06:17:03.203","description":"The EventPrime  WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowing unauthenticated users to view posts, pages and other content that are awaiting review.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/d3cdae3c-79a4-4daf-8fe4-b03cd589beb4/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}