CVE-2024-24796

CVE-2024-24796 describes a PHP Object Injection (Deserialization of Untrusted Data) vulnerability in the WordPress plugin “MageEventpress” (Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently), affected versions n/a through 4.1.1. Public sources confirm the issue stems from untru...

PT-2024-20564 · WordPress · Wpevently

Name of the Vulnerable Software and Affected Versions: Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin versions n/a through 4.1.1 Description: The issue is related to Deserialization of Untrusted Data, which affects the Event Manager and Tickets Selling...

WordPress Plugin WpEvently Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently < 4.1.2 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save

Description The Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.1 via deserialization of untrusted input in the mepeventmetasave function. This makes it possible for...