Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-0235
HistoryJan 16, 2024 - 4:15 p.m.

Code injection

2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
3
code injection
eventon
wordpress
plugin
ajax action
unauthenticated access
user email addresses
nvd

7.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog

CPENameOperatorVersion
eventonlt2.2.7
eventonge4.0
eventonlt4.5.5

7.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%