CVE-2022-1054

The CVE-2022-1054 entry concerns the WordPress RSVP and Event Management plugin before 2.7.8, which lacks authorization checks for exporting entries and hooks the export function to the init action. This allows unauthenticated users to retrieve PII (first name, last name, email) of event-register...