CVE-2026-109994: falha de média gravidade em arraytics Eventin – Events Calendar, Tickets…
Eventin <= 4.1.29 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'id' Parameter
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.3%
The Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.1.29 via the 'id' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the email address and phone number of any WordPress user, including administrators, by supplying their user id in a query-string parameter while placing the authenticated user's own id in the URL path.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
arraytics · Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerceReferências
https://plugins.trac.wordpress.org/browser/wp-event-solution/tags/4.1.26/core/AccessControl/Ownership.php#L413https://plugins.trac.wordpress.org/browser/wp-event-solution/tags/4.1.26/core/AccessControl/Ownership.php#L59https://plugins.trac.wordpress.org/browser/wp-event-solution/tags/4.1.26/core/speaker/Api/SpeakerController.php#L161https://plugins.trac.wordpress.org/browser/wp-event-solution/tags/4.1.26/core/speaker/Api/SpeakerController.php#L393https://plugins.trac.wordpress.org/changeset/3749617/wp-event-solution/trunk/core/speaker/Api/SpeakerController.phphttps://plugins.trac.wordpress.org/changeset/3759930/wp-event-solution/trunk/core/speaker/Api/SpeakerController.phphttps://www.wordfence.com/threat-intel/vulnerabilities/id/7f890e7b-4255-4d74-b717-bc4c9ad0eea6?source=cve