CVE-2024-1316medium

CVE-2024-1316: fallo de gravedad media en Event Tickets and Registration

Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Event Tickets and Registration+ Monitorear Events Tickets Plus

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5epss 0.6%
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Unknown · Events Tickets PlusUnknown · Event Tickets and Registration
CVEs relacionadas — Event Tickets and Registration

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-1319MEDIUMEvent Tickets Plus < 5.9.1 - Contributor+ Attendees Lists DisclosureEPSS 0.5%CVE-2026-14822MEDIUMEvent Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status ManipulationEPSS 0.3%CVE-2026-14819LOWEvent Tickets < 5.28.4 - Editor+ Stored XSS via Ticket MoveEPSS 0.2%CVE-2026-14823LOWEvent Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOREPSS 0.2%