CVE-2024-43143mediumCWE-862

CVE-2024-43143: medium-severity vulnerability in Roundup WP Registrations for the Events Calendar

WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability

Published · Updated

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.4epss 0.4%
exploitation probability
0.4%top 69% of all CVEs
observed exploitation
nono source reports it
Missing Authorization vulnerability in Roundup WP Registrations for the Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Registrations for the Events Calendar: from n/a through 2.12.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
Affected products
Roundup WP · Registrations for the Events Calendar
Related CVEs — Roundup WP Registrations for the Events Calendar

In the same product, most dangerous first.

CVE-2024-39638HIGHWordPress Registrations for the Events Calendar plugin <= 2.12.2 - SQL Injection vulnerabilityEPSS 0.4%
References
https://patchstack.com/database/vulnerability/registrations-for-the-events-calendar/wordpress-registrations-for-the-events-calendar-plugin-2-12-1-broken-access-control-vulnerability?_s_id=cve