CVE-2023-6557

CVE-2023-6557 concerns The Events Calendar plugin for WordPress. Affected: The Events Calendar versions up to and including 6.2.8.2. Root cause: a route function hooked into wp_ajax_nopriv_tribe_dropdown allows unauthenticated access, enabling potential exposure of sensitive data such as post tit...

CVE-2023-6557 The Events Calendar <= 6.2.8.2 - Unauthenticated Sensitive Information Exposure

The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.2.8.2 via the route function hooked into wpajaxnoprivtribedropdown. This makes it possible for unauthenticated attackers to extract potentially sensitive data...

CVE-2023-6557 The Events Calendar <= 6.2.8.2 - Unauthenticated Sensitive Information Exposure

The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.2.8.2 via the route function hooked into wpajaxnoprivtribedropdown. This makes it possible for unauthenticated attackers to extract potentially sensitive data...

CVE-2023-6808 Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.0.93 due to insufficient input sanitization and output escaping on user supplied attributes. This makes i...

CVE-2024-24267

creationtimestamp| type| source ---|---|--- 2024-02-05 19:21:58+00:00| seen| https://t.me/ctinow/179441 2024-02-08 03:16:20+00:00| seen| https://t.me/ctinow/181123 2024-02-29 11:26:59+00:00| seen| https://t.me/ctinow/196519 2025-06-20 20:44:23+00:00| published-proof-of-concept|...

CVE-2024-24262

creationtimestamp| type| source ---|---|--- 2024-02-05 19:21:54+00:00| seen| https://t.me/ctinow/179437 2024-02-08 03:16:17+00:00| seen| https://t.me/ctinow/181121 2024-02-29 10:51:35+00:00| seen| https://t.me/ctinow/196489...

CVE-2024-24259

creationtimestamp| type| source ---|---|--- 2024-02-05 19:21:52+00:00| seen| https://t.me/ctinow/179435 2024-02-08 03:16:14+00:00| seen| https://t.me/ctinow/181118 2024-02-15 06:26:41+00:00| seen| https://t.me/ctinow/185259 2024-02-29 10:26:21+00:00| seen| https://t.me/ctinow/196477...

CVE-2024-24574

creationtimestamp| type| source ---|---|--- 2024-02-05 18:10:27+00:00| published-proof-of-concept| https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-7m8g-fprr-47fx 2024-02-05 22:32:01+00:00| seen| https://t.me/ctinow/179549 2024-02-13 02:16:44+00:00| seen| https://t.me/ctinow/183559...

CVE-2024-24468

creationtimestamp| type| source ---|---|--- 2024-02-05 17:22:26+00:00| seen| https://t.me/ctinow/179354 2024-02-08 02:16:40+00:00| seen| https://t.me/ctinow/181093 2024-02-29 09:56:49+00:00| seen| https://t.me/ctinow/196420...

CVE-2024-24859

creationtimestamp| type| source ---|---|--- 2024-02-05 09:31:37+00:00| seen| https://t.me/ctinow/179069 2024-02-29 08:47:03+00:00| seen| https://t.me/ctinow/196345...

CVE-2024-24858

creationtimestamp| type| source ---|---|--- 2024-02-05 09:31:36+00:00| seen| https://t.me/ctinow/179068 2024-02-29 08:47:00+00:00| seen| https://t.me/ctinow/196343...

CVE-2024-22386

creationtimestamp| type| source ---|---|--- 2024-02-05 09:31:31+00:00| seen| https://t.me/ctinow/179063 2024-02-29 08:47:07+00:00| seen| https://t.me/ctinow/196348...

CVE-2024-24865

creationtimestamp| type| source ---|---|--- 2024-02-05 08:26:40+00:00| seen| https://t.me/ctinow/179033 2024-02-29 07:51:43+00:00| seen| https://t.me/ctinow/196308...

CVE-2024-24838

creationtimestamp| type| source ---|---|--- 2024-02-05 08:26:31+00:00| seen| https://t.me/ctinow/179027 2024-02-29 07:51:44+00:00| seen| https://t.me/ctinow/196309...

WordPress plguin The Events Calendar security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

PT-2024-15006 · WordPress · The Events Calendar

Name of the Vulnerable Software and Affected Versions: The Events Calendar plugin for WordPress versions up to, and including, 6.2.8.2 Description: The issue allows unauthenticated attackers to extract potentially sensitive data, including post titles and IDs of pending, private, and draft posts,...

Important: kernel

Issue Overview: An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 netfilter: nftables: Reject tables of unsupported family; While creating a new netfilter table, lack of a safeguard against invalid nftables family pf values within nftablesnewtable...

WordPress plugin Booking for Appointments and Events Calendar security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2020-36773

creationtimestamp| type| source ---|---|--- 2024-02-04 19:21:22+00:00| seen| https://t.me/ctinow/178926 2024-02-05 08:26:42+00:00| seen| https://t.me/ctinow/179034 2024-02-25 18:21:45+00:00| seen| https://t.me/ctinow/192965...

CVE-2023-43183

creationtimestamp| type| source ---|---|--- 2024-02-03 10:21:48+00:00| seen| https://t.me/ctinow/178467 2024-02-13 03:16:28+00:00| seen| https://t.me/ctinow/183581 2024-02-20 02:31:43+00:00| seen| https://t.me/ctinow/188051...