5.3

CVE-2024-5333

Exploit

The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure

The Events Calendar <= 6.8.2 - Missing Authorization to Unauthenticated Password Protected Event Disclosure

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events.
Mögliche Gegenmaßnahme
The Events Calendar: Update to version 6.8.2.1, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Stellarwp ≫ The Events Calendar SwPlatformwordpress Version < 6.8.2.1
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt The Events Calendar
Version *-6.8.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.07% 0.605
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wpscan.com/vulnerability/764b5a23-8b51-4882-b899-beb54f684984/
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/91e27e66-daf2-41d4-91bd-22c398559c23
Third Party Advisory