Lucene search

K
wpvulndbWpvulndbWPVDB-ID:9B46FD80-F85E-4AE1-AC9A-2FA85361C8A7
HistoryMay 30, 2024 - 12:00 a.m.

The Events Calendar Free & Pro <= 6.4.0 - Contributor+ Missing Authorization to Authenticated Arbitrary Events Access

2024-05-3000:00:00
wpscan.com
7
wordpress
plugin
vulnerability
contributor
access
authentication

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

18.7%

Description Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access of data due to a insufficient capability checks and restrictions on a function in various versions. This makes it possible for authenticated attackers, with Contributor-level access and above, to access arbitrary events that they should not have access to.

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

18.7%

Related for WPVDB-ID:9B46FD80-F85E-4AE1-AC9A-2FA85361C8A7