Lucene search
PRIOn knowledge basePRION:CVE-2024-1321HistoryMar 13, 2024 - 4:15 p.m.
Design/Logic Flaw
2024-03-1316:15:00
PRIOn knowledge base
www.prio-n.com
3
eventprime
wordpress
plugin
vulnerability
unauthenticated users
free bookings
payment bypass
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 3.4.2. This is due to the plugin allowing unauthenticated users to update the status of order payments. This makes it possible for unauthenticated attackers to book events for free.
Related
nvd
nvd
CVE-2024-1321
2024-03-13 16:15:19
wpvulndb
wpvulndb
cve
cve
CVE-2024-1321
2024-03-13 16:15:19
cvelist
cvelist
CVE-2024-1321
2024-03-13 15:26:56
wordfence
wordfence