CVE-2024-13526

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the exportsubmittionattendees function in all versions up to, and including, 4.0.7.3. This makes it possible for authenticated attackers,...

CVE-2024-13526

creationtimestamp| type| source ---|---|--- 2025-03-07 02:35:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6786 2025-03-07 04:03:54+00:00| seen| https://t.me/cvedetector/19772 2025-03-07 05:59:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrddpyzeb2h 2025-03-08...

CVE-2024-13526

CVE-2024-13526 affects the EventPrime – Events Calendar, Bookings and Tickets WordPress plugin. The root cause is missing capability checks in the export_submittion_attendees function across all versions up to 4.0.7.3, enabling authenticated users with Subscriber-level access and higher to downlo...

CVE-2024-13526 EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the exportsubmittionattendees function in all versions up to, and including, 4.0.7.3. This makes it possible for authenticated attackers,...