7.5
Élevée
CVE-2024-8700 The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing…
Description
The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Event Calendar 1.0 | premières → 1.0.4 | Pas de correctif indiqué |