CVE-2024-1127

CVE-2024-1127 affects the WordPress plugin “EventPrime – Events Calendar, Bookings and Tickets.” The vulnerability is a missing capability check in booking_export_all(), present in all versions up to and including 3.4.1. This allows authenticated attackers with subscriber-level access or higher t...