The vulnerability of the EventOn Lite and EventON plugins of the WordPress content management system allows a hacker to gain unauthorized access to protected information.
🗓️ 22 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec🔗 bdu.fstec.ru👁 8 Views
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | Wordpress EventON Calendar 4.4 Plugin - Unauthenticated Post Access via IDOR Vulnerability | 4 Aug 202300:00 | – | zdt |
 | WordPress plugin EventON 安全漏洞 | 10 Jul 202300:00 | – | cnnvd |
 | CVE-2023-3219 | 10 Jul 202312:41 | – | cve |
 | CVE-2023-3219 EventON < 2.1.2 - Unauthenticated Post Access via IDOR | 10 Jul 202312:41 | – | cvelist |
 | Wordpress Plugin EventON Calendar 4.4 - Unauthenticated Post Access via IDOR | 4 Aug 202300:00 | – | exploitdb |
 | EventON Lite < 2.1.2 - Arbitrary File Download | 29 Jul 202605:02 | – | nuclei |
 | CVE-2023-3219 | 10 Jul 202316:15 | – | nvd |
 | CVE-2023-3219 | 10 Jul 202316:15 | – | osv |
 | WordPress EventON Calendar 4.4 Insecure Direct Object Reference | 4 Aug 202300:00 | – | packetstorm |
 | WordPress EventON Plugin < 2.1.2 is vulnerable to Insecure Direct Object References (IDOR) | 22 Jun 202300:00 | – | patchstack |
10
Node
OR
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Jan 2024 00:00Current
6.6Medium risk
Vulners AI Score6.6
CVSS 37.5
CVSS 27.8
EPSS0.07521