Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-1122

Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export

Description

The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_data() function in all versions up to, and including, 3.3.50. This makes it possible for unauthenticated attackers to export event data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)

Default version status: unaffected

  • 0 to ≤ 3.3.50affected

References