6.5
Moyenne
CVE-2024-1316 The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does…
Description
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Event Tickets and Registration 5.8 | premières → < 5.8.1 | 5.8.1 |
| Events Tickets Plus 5.9 | premières → < 5.9.1 | 5.9.1 |
| eventbrite_tickets 5.8 | premières → < 5.8.1 | 5.8.1 |
Autres CVE de Event Tickets and Registration
Les 4 CVE de Event Tickets and Registration →
CVE-2026-14823
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of…
2.2
Faible
CVE-2026-14822
The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of…
5.3
Moyenne
CVE-2026-14819
The Event Tickets and Registration WordPress plugin before 5.28.4 does not properly escape event titles before…
3.5
Faible