Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-0236
HistoryJan 16, 2024 - 4:15 p.m.

Default credentials

2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
6
default credentials
eventon
wordpress plugin
ajax action
unauthenticated users
virtual events
meeting password
zoom
nvd

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set (for example for Zoom)

CPENameOperatorVersion
eventonlt2.2.7
eventonge4.0
eventonlt4.5.5

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

Related for PRION:CVE-2024-0236