Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8vgr-3wf8-f94v

Опубликовано: 10 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view private or password-protected events.

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view private or password-protected events.

EPSS

Процентиль: 71%
0.00665
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Private or Password-protected events due to missing authorization checks in all versions up to, and including, 4.0.4.3. This makes it possible for unauthenticated attackers to view private or password-protected events.

EPSS

Процентиль: 71%
0.00665
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862