Access violation vulnerability in EventPrime – Events Calendar, Bookings and Tickets 3.4.1

The EventPrime plugin for WordPress, which is used for managing events, bookings, and tickets, has a security vulnerability that allows unauthorized access to data. This is because a certain function, called get_attendees_email_by_event_id(), does not have a check to make sure the user has the right permissions. As a result, anyone with at least subscriber-level access can view the list of attendees for any event.