Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin, f4685f6f478a2942072b9c51ebe4f460c17ead60
- CVE, Research URL
- Home page URL
-
Security reports for Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin
- Published on
- Dec 04, 2023
- Research Description
- Event Manager, Events Calendar, Tickets, Registrations – Eventin [wp-event-solution] < 3.3.53 WordPress Eventin Plugin <= 3.3.44 is vulnerable to Broken Access Control No patched version is available. Abdi Pranata discovered and reported this Broken Access Control vulnerability in WordPress Eventin Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.
- Affected versions
-
Min -, max 3.3.53.
- Status
-
vulnerable