EUVD-2024-16035

Malicious code in bioql PyPI...

PT-2024-15403 · WordPress · Eventon

Name of the Vulnerable Software and Affected Versions: EventON WordPress plugin versions prior to 4.5.9 EventON WordPress plugin versions prior to 2.2.7 Description: The issue concerns a lack of authorization in some AJAX actions within the EventON WordPress plugin, allowing unauthenticated users...

CVE-2024-0237: Missing Authorization

The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated users to update virtual events settings, such as meeting URL, moderator, access details etc...