PT-2024-17940 · WordPress · Eventprime – Events Calendar

Name of the Vulnerable Software and Affected Versions: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress versions up to, and including, 3.4.3 Description: The issue is related to Stored Cross-Site Scripting via the offline status parameter due to insufficient input...

WordPress Plugin EventPrime Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-16844 · WordPress · Eventprime – Events Calendar

Name of the Vulnerable Software and Affected Versions: The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress versions up to, and including, 3.4.2 Description: The issue is related to a missing capability check on the save frontend event submission function, allowing...

CVE-2024-2319

creationtimestamp| type| source ---|---|--- 2024-03-08 15:26:18+00:00| seen| https://t.me/ctinow/203382 2024-03-08 15:26:24+00:00| seen| https://t.me/ctinow/203387...

CVE-2024-2284

creationtimestamp| type| source ---|---|--- 2024-03-08 04:26:10+00:00| seen| https://t.me/ctinow/203027 2024-03-08 04:26:17+00:00| seen| https://t.me/ctinow/203033 2024-03-08 06:51:54+00:00| seen| https://t.me/ctinow/203077...

CVE-2024-23273

creationtimestamp| type| source ---|---|--- 2024-03-08 03:26:40+00:00| seen| https://t.me/ctinow/202995 2024-03-08 03:32:14+00:00| seen| https://t.me/ctinow/203015...

CVE-2024-23270

creationtimestamp| type| source ---|---|--- 2024-03-08 03:26:38+00:00| seen| https://t.me/ctinow/202993 2024-03-08 03:32:12+00:00| seen| https://t.me/ctinow/203013...

CVE-2024-23267

creationtimestamp| type| source ---|---|--- 2024-03-08 03:26:35+00:00| seen| https://t.me/ctinow/202990 2024-03-08 03:32:10+00:00| seen| https://t.me/ctinow/203010...

CVE-2024-23265

creationtimestamp| type| source ---|---|--- 2024-03-08 03:26:33+00:00| seen| https://t.me/ctinow/202988 2024-03-08 03:32:07+00:00| seen| https://t.me/ctinow/203008...

CVE-2024-23260

creationtimestamp| type| source ---|---|--- 2024-03-08 03:26:25+00:00| seen| https://t.me/ctinow/202984 2024-03-08 03:32:00+00:00| seen| https://t.me/ctinow/203004...

CVE-2024-23254

creationtimestamp| type| source ---|---|--- 2024-03-08 03:26:20+00:00| seen| https://t.me/ctinow/202979...

CVE-2024-2276

creationtimestamp| type| source ---|---|--- 2024-03-08 02:27:01+00:00| seen| https://t.me/ctinow/202962 2024-03-08 02:27:04+00:00| seen| https://t.me/ctinow/202965...

CVE-2024-2274

creationtimestamp| type| source ---|---|--- 2024-03-08 02:26:59+00:00| seen| https://t.me/ctinow/202960 2024-03-08 02:27:03+00:00| seen| https://t.me/ctinow/202963 2024-03-09 18:17:05+00:00| seen| https://t.me/ctinow/204035...

CVE-2024-23245

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent...

CVE-2024-25729

creationtimestamp| type| source ---|---|--- 2024-03-08 01:21:59+00:00| seen| https://t.me/ctinow/202935 2024-03-08 01:27:11+00:00| seen| https://t.me/ctinow/202940...

CVE-2024-25327

creationtimestamp| type| source ---|---|--- 2024-03-08 01:21:58+00:00| seen| https://t.me/ctinow/202934 2024-03-08 01:27:10+00:00| seen| https://t.me/ctinow/202939...

EventPrime – Events Calendar, Bookings and Tickets < 3.4.3 - Missing Authorization to Arbitrary Post Overwrite

Description The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savefrontendeventsubmission function in all versions up to, and including, 3.4.2. This makes it possible for...

EventPrime – Events Calendar, Bookings and Tickets < 3.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending

Description The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the epsendattendeesemail function in all versions up to, and including, 3.4.1. This makes it possible for authenticated attacker...

EventPrime – Events Calendar, Bookings and Tickets < 3.4.3 - Unauthenticated Booking Payment Bypass

Description The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 3.4.2. This is due to the plugin allowing unauthenticated users to update the status of order payments. This makes it possible for...

Fedora: Security Advisory for jakarta-interceptors (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...