Логотип exploitDog
bind:CVE-2024-1319
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-1319

Количество 2

Количество 2

nvd логотип

CVE-2024-1319

почти 2 года назад

The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-j63f-r65c-3x8x

почти 2 года назад

The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-1319

The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).

CVSS3: 4.3
0%
Низкий
почти 2 года назад
github логотип
GHSA-j63f-r65c-3x8x

The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).

CVSS3: 4.3
0%
Низкий
почти 2 года назад

Уязвимостей на страницу