CVE-2024-8369

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view private or password-protected events.
Configurations

Configuration 1 (hide)

cpe:2.3:a:metagauss:eventprime:*:*:*:*:*:wordpress:*:*

History

26 Sep 2024, 15:43

Type Values Removed Values Added
First Time Metagauss eventprime
Metagauss
CPE cpe:2.3:a:metagauss:eventprime:*:*:*:*:*:wordpress:*:*
Summary
  • (es) El complemento EventPrime – Events Calendar, Bookings and Tickets para WordPress es vulnerable al acceso no autorizado a eventos privados o protegidos con contraseña debido a la falta de comprobaciones de autorización en todas las versiones hasta la 4.0.4.3 incluida. Esto permite que atacantes no autenticados vean eventos privados o protegidos con contraseña.
References () https://wordpress.org/plugins/eventprime-event-calendar-management/ - () https://wordpress.org/plugins/eventprime-event-calendar-management/ - Product
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/97174ec0-a2b7-455e-9bf8-b6f51546beee?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/97174ec0-a2b7-455e-9bf8-b6f51546beee?source=cve - Third Party Advisory

10 Sep 2024, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-10 12:15

Updated : 2024-09-26 15:43


NVD link : CVE-2024-8369

Mitre link : CVE-2024-8369

CVE.ORG link : CVE-2024-8369


JSON object : View

Products Affected

metagauss

  • eventprime
CWE
CWE-862

Missing Authorization