Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: EventON 2.1.2 Clear all filters
TI-2023-03015 CVE-2023-3219 · GHSA-6ccc-8wgj-7rf9

EventON < 2.1.2 - Unauthenticated Post Access via IDOR

Priority MEDIUM 63

The EventON WordPress plugin before 2.1.2 does not validate that the event_id parameter in its eventon_ics_download ajax action is a valid Event, allowing unauthenticated visitors to access any Post (including unpublishe…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07521 Published 2023-07-10 Fixed in 2.1.2 CWE-639
TI-2023-02619 CVE-2023-2796 · GHSA-v77x-qc2p-7878

EventON < 2.1.2 - Unauthenticated Event Access

Priority MEDIUM 63

The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing thei…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.42674 Published 2023-07-10 Fixed in 2.1.2 CWE-862