← CVE Intelligence

CVE-2024-0237

EventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update PUBLISHED

Description (CNA)

The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated users to update virtual events settings, such as meeting URL, moderator, access details etc

Affected (CNA)

Vendor / productVersions
Unknown / EventON Premiumaffected 0 before 4.5.8
Unknown / EventONaffected 0 before 2.2.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.