CVE-2024-24796

2024-02-1208:15:40

CWE-502

[email protected]

web.nvd.nist.gov

cve

2024

24796

deserialization

untrusted data

magepeople

team event manager

tickets selling

woocommerce

wpevently

wordpress plugin

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

8.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a through 4.1.1.

Affected configurations

Vulners

Node

magepeople_teamevent_manager_and_tickets_selling_plugin_for_woocommerce_–_wpevently_–_wordpress_pluginRange≤4.1.1

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "mage-eventpress",
    "product": "Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin",
    "vendor": "MagePeople Team",
    "versions": [
      {
        "changes": [
          {
            "at": "4.1.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]