CVE-2024-43143 — WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability

CVE-2024-43143

WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Roundup WP Registrations for the Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Registrations for the Events Calendar: from n/a through 2.12.1.

Affected (CNA)

Vendor / product	Versions
Roundup WP / Registrations for the Events Calendar	affected n/a through 2.12.1

CWE

CWE-862

References

https://patchstack.com/database/vulnerability/registrations-for-the-events-calendar/wordpress-registrations-for-the-events-calendar-plugin-2-12-1-broken-access-control-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.