CVE-2024-1316medium

CVE-2024-1316: falha de média gravidade em Event Tickets and Registration

Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Event Tickets and Registration+ Monitorar Events Tickets Plus

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.6%
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Unknown · Events Tickets PlusUnknown · Event Tickets and Registration
CVEs relacionadas — Event Tickets and Registration

No mesmo produto, das mais perigosas para as menos.

CVE-2024-1319MEDIUMEvent Tickets Plus < 5.9.1 - Contributor+ Attendees Lists DisclosureEPSS 0.5%CVE-2026-14822MEDIUMEvent Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status ManipulationEPSS 0.3%CVE-2026-14819LOWEvent Tickets < 5.28.4 - Editor+ Stored XSS via Ticket MoveEPSS 0.2%CVE-2026-14823LOWEvent Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOREPSS 0.2%