Lucene search
PRIOn knowledge basePRION:CVE-2024-1125HistoryMar 09, 2024 - 7:15 a.m.
Design/Logic Flaw
2024-03-0907:15:00
PRIOn knowledge base
www.prio-n.com
8
wordpress
eventprime
vulnerability
data loss
capability check
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the calendar_events_delete() function in all versions up to, and including, 3.4.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary posts.
Related
cve
cve
CVE-2024-1125
2024-03-09 07:15:08
cvelist
cvelist
CVE-2024-1125
2024-03-09 07:01:10
nvd
nvd
CVE-2024-1125
2024-03-09 07:15:08
wpvulndb
wpvulndb
wordfence
wordfence