CVE-2024-11134

creationtimestamp| type| source ---|---|--- 2025-02-03 19:29:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113941608994890609 2025-02-03 20:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcec52qjv2r 2025-02-03 22:00:18+00:00| seen|...

CVE-2024-11134 Eventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Export

The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'eventerexportbookingscsv' function in all versions up to, and including, 3.9.9. This makes it possible for authenticated attackers with subscriber-level permissions or above, to...

CVE-2024-11134

CVE-2024-11134 affects the WordPress Eventer plugin (Eventer - WordPress Event & Booking Manager Plugin). The issue is a missing authorization check on the eventer_export_bookings_csv function, allowing authenticated users with subscriber-level permissions or higher to download bookings that cont...