Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2024-1316 | 4 Mar 202422:27 | – | circl |
 | WordPress Plugins Event Tickets and Registration Security Vulnerability | 4 Mar 202400:00 | – | cnnvd |
 | CVE-2024-1316 | 4 Mar 202421:00 | – | cve |
 | CVE-2024-1316 Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access | 4 Mar 202421:00 | – | cvelist |
 | CVE-2024-1316 | 4 Mar 202421:15 | – | nvd |
 | CVE-2024-1316 | 4 Mar 202421:15 | – | osv |
 | WordPress Event Tickets Plugin < 5.8.1 is vulnerable to Broken Access Control | 5 Mar 202400:00 | – | patchstack |
| WordPress Events Tickets Plus Plugin < 5.9.1 is vulnerable to Broken Access Control | 5 Mar 202400:00 | – | patchstack |
 | Code injection | 4 Mar 202421:15 | – | prion |
 | PT-2024-17936 · WordPress · Events Tickets Plus +1 | 4 Mar 202400:00 | – | ptsecurity |
10
1. ADMIN: Install Event Tickets
2. ADMIN: Install Event Tickets Plus (Event Tickets Plus required for this specific shortcode that exists in the Event Tickets code)
3. ADMIN: Create pages with each status: published, private, password-protected, draft, and trashed and add one RSVP that has an end sale date of 1 week from now
4. ADMIN: Go to those pages and RSVP for each one as the currently logged in admin
5. CONTRIBUTOR: Add shortcode to any post and specify/guess the user ID and save
6. CONTRIBUTOR: Preview the post and see all pages (of any status) you shouldn't have access to and for any user you shouldn't be able to see
Example shortcode: `[tribe-user-event-confirmations user="ANY_USER_ID"]`Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 Feb 2024 00:00Current
6.8Medium risk
Vulners AI Score6.8
EPSS0.00604