PT-2026-47070

The Event Monster – Event Management, Events Calendar, Tickets plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to, and including, 2.1.0. This is due to the capture payment AJAX handler registered via wp ajax nopriv em capture payment trusting...