PT-2024-16836

Name of the Vulnerable Software and Affected Versions The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress versions up to, and including, 3.3.50 Description The issue is related to unauthorized access of data due to a missing capability check on the...

Eventin <= 3.3.44 - Missing Authorization

Description The Eventin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on an unknown function in versions up to, and including, 3.3.44. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthoriz...

WordPress Eventin Plugin <= 3.3.52 is vulnerable to Broken Access Control

Software Eventin Type Plugin Vulnerable versions = 3.3.52 Fixed in 3.3.53 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-49756 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID fd0f59f34c59 Credits Abdi Pranata Required privile...