Lucene search

K
wpvulndbWpvulndbWPVDB-ID:AD0646FB-6318-47A8-A502-B7ED9F57C092
HistoryFeb 08, 2024 - 12:00 a.m.

Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin < 3.3.51 - Missing Authorization to Unauthenticated Events Export

2024-02-0800:00:00
wpscan.com
5
wordpress
eventin plugin
vulnerable
unauthorized access
data
capability check
unauthenticated attackers
event data

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.5%

Description The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_data() function in all versions up to, and including, 3.3.50. This makes it possible for unauthenticated attackers to export event data.

CPENameOperatorVersion
eq3.3.51

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.5%

Related for WPVDB-ID:AD0646FB-6318-47A8-A502-B7ED9F57C092