← CVE Intelligence

CVE-2024-0236

EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure PUBLISHED

Description (CNA)

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set (for example for Zoom)

Affected (CNA)

Vendor / productVersions
Unknown / EventONaffected 0 before 4.5.5
Unknown / EventONaffected 0 before 2.2.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.