CVE-2024-11396

creationtimestamp| type| source ---|---|--- 2025-01-14 01:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3afete22t 2025-01-14 12:49:35+00:00| seen| https://infosec.exchange/users/randomrobbie/statuses/113826789763064009 2025-01-14 13:01:50+00:00| seen|...

CVE-2024-11396 Event monster <= 1.4.3 - Information Exposure Via Visitors List Export

The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.3 via the Visitors List Export file. During the export, a CSV file is created in the wp-content folder with a hardcoded filena...

CVE-2024-11396

CVE-2024-11396 : The WordPress plugin Event Monster – Event Management, Tickets Booking, Upcoming Event (versions up to 1.4.3) allows information exposure via the Visitors List Export. During export, a CSV is created in wp-content with a public filename, letting unauthenticated attackers access v...