CVE-2024-11133

The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handlepdfdownloadrequest' function in all versions up to, and including, 3.9.9.5. This makes it possible for unauthenticated attackers to download event tickets...

CVE-2024-11133

creationtimestamp| type| source ---|---|--- 2025-02-03 19:29:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113941608980679606 2025-02-03 20:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcec2fglz2t 2025-02-03 22:00:18+00:00| seen|...

CVE-2024-11133

CVE-2024-11133 affects the WordPress Eventer plugin (Eventer - WordPress Event & Booking Manager Plugin). A missing capability check in handle_pdf_download_request allows unauthenticated users to download event tickets across versions up to 3.9.9. Several connected sources confirm the vulnerabili...

CVE-2024-11133 Eventer <= 3.9.9.5 - Missing Authorization to Unauthenticated Event Ticket Download

The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handlepdfdownloadrequest' function in all versions up to, and including, 3.9.9.5. This makes it possible for unauthenticated attackers to download event tickets...