← CVE Intelligence

CVE-2024-8700

Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion PUBLISHED

Description (CNA)

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.

Affected (CNA)

Vendor / productVersions
Unknown / Event Calendaraffected 0 through 1.0.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.