CVE-2024-1122: Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportdata() function in all versions up to, and including, 3.3.50. This makes it possible for unauthenticated attackers to export event data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1122?
CVE-2024-1122 is considered a high severity vulnerability due to the risk of unauthorized data access.
How do I fix CVE-2024-1122?
To fix CVE-2024-1122, update the Eventin plugin for WordPress to version 3.3.51 or later.
What kind of data is exposed in CVE-2024-1122?
CVE-2024-1122 allows unauthorized access to sensitive event data exported by the plugin.
Which versions are affected by CVE-2024-1122?
CVE-2024-1122 affects all versions of the Eventin plugin for WordPress up to and including 3.3.50.
Who is at risk from CVE-2024-1122?
Any WordPress site using the affected versions of the Eventin plugin is at risk of an unauthorized data breach due to CVE-2024-1122.