Lucene search

K
cvelistPatchstackCVELIST:CVE-2024-24796
HistoryFeb 12, 2024 - 7:47 a.m.

CVE-2024-24796 WordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection

2024-02-1207:47:08
CWE-502
Patchstack
www.cve.org
wordpress
woocommerce
plugin
vulnerability
object injection

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

8.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a through 4.1.1.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "mage-eventpress",
    "product": "Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin",
    "vendor": "MagePeople Team",
    "versions": [
      {
        "changes": [
          {
            "at": "4.1.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

8.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2024-24796