Default credentials

🗓️ 20 Sep 2021 10:15:00Reported by PRIOn knowledge baseType

The Timetable and Event Schedule WordPress plugin version before 2.4.0 exposes hashed passwords, username, and email address in response to a user's request for event timeslot data, potentially allowing low privilege users to access sensitive user data

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-24585	20 Sep 202114:26	–	circl
CNNVD	WordPress 插件信息泄露漏洞	20 Sep 202100:00	–	cnnvd
CVE	CVE-2021-24585	20 Sep 202110:06	–	cve
Cvelist	CVE-2021-24585 Timetable and Event Schedule by MotoPress < 2.4.0 - Arbitrary User's Hashed Password/Email/Username Disclosure	20 Sep 202110:06	–	cvelist
EUVD	EUVD-2021-11497	7 Oct 202500:30	–	euvd
NVD	CVE-2021-24585	20 Sep 202110:15	–	nvd
OSV	CVE-2021-24585	20 Sep 202110:15	–	osv
Patchstack	WordPress Timetable and Event Schedule by MotoPress plugin <= 2.3.19 - Arbitrary User's Hashed Password/Email/Username Disclosure vulnerability	23 Aug 202100:00	–	patchstack
RedhatCVE	CVE-2021-24585	22 May 202521:04	–	redhatcve
wpexploit	Timetable and Event Schedule by MotoPress < 2.4.0 - Arbitrary User's Hashed Password/Email/Username Disclosure	23 Aug 202100:00	–	wpexploit