CVE-2024-1316 — Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access

Description (CNA)

The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).

Affected (CNA)

Vendor / product	Versions
Unknown / Event Tickets and Registration	affected 0 before 5.8.1
Unknown / Events Tickets Plus	affected 0 before 5.9.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d80dfe2f-207d-4cdf-8c71-27936c6318e5/

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/d80dfe2f-207d-4cdf-8c71-27936c6318e5/

CISA-ADP

No English description supplied.

No references supplied.