Vulnerabilities

TI-2023-17867 CVE-2023-35777 · GHSA-3crp-m98r-rm3q

WordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in The Events Calendar The Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.1.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00625 Published 2024-12-13 No fix listed CWE-862

TI-2024-16246 CVE-2024-24715 · GHSA-p7q7-p9r8-m9q3

WordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability

LOW 35

Improper Validation of Specified Quantity in Input vulnerability in The Events Calendar BookIt allows Manipulating Hidden Fields.This issue affects BookIt: from n/a through 2.4.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00482 Published 2024-05-17 No fix listed CWE-1284

Vulnerabilities

Filters

WordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerability

WordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability