Lucene search

K

4 matches found

CVE
CVE
added 2024/10/19 7:15 a.m.42 views

CVE-2023-6243

The EventON PRO - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.8. This is due to missing or incorrect nonce validation on the admin_test_email function. This makes it possible for unauthenticated a...

4.3CVSS4.8AI score0.00034EPSS
CVE
CVE
added 2024/01/11 3:15 p.m.31 views

CVE-2023-6242

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.4 (for Pro) & 2.2.7 (for Free). This is due to missing or incorrect nonce validation on the evo_eventpost_update_meta function. This makes...

6.5CVSS5.3AI score0.00108EPSS
CVE
CVE
added 2024/01/10 3:15 p.m.30 views

CVE-2023-6158

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the evo_eventpost_update_meta function in all versions up to, and including, 4.5.4 (for Pro) and 2.2.7 (for free). This...

6.5CVSS7.2AI score0.00154EPSS
CVE
CVE
added 2024/01/11 3:15 p.m.28 views

CVE-2023-6244

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.4 (Pro) & 2.2.8 (Free). This is due to missing or incorrect nonce validation on the save_virtual_event_settings function. This makes it po...

6.5CVSS5.2AI score0.00108EPSS