CVE-2024-38762: WordPress Event Tickets and Registration plugin <= 5.11.0.4 - Cross Site Request Forgery (CSRF) vulnerability
Published Jan 2, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP Event Tickets event-tickets allows Cross Site Request Forgery.This issue affects Event Tickets: from n/a through <= 5.11.0.4.
Affected Software
1 affected component
wordpress/event-tickets<=5.11.0.4
Remediation
Information
Update the WordPress Event Tickets plugin to the latest available version (at least 5.11.0.5).
Event History
Jan 2, 2025
CVE Published
via MITRE·12:01 PM
Data Sourced
via MITRE·12:01 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38762?
CVE-2024-38762 is a moderate severity Cross-Site Request Forgery (CSRF) vulnerability.
2
How do I fix CVE-2024-38762?
To fix CVE-2024-38762, update The Events Calendar Event Tickets plugin to version 5.11.0.5 or later.
3
What versions of Event Tickets are affected by CVE-2024-38762?
CVE-2024-38762 affects The Events Calendar Event Tickets versions from n/a through 5.11.0.4.
4
Can CVE-2024-38762 lead to unauthorized actions?
Yes, CVE-2024-38762 can potentially allow attackers to perform unauthorized actions on behalf of users.
5
Is CVE-2024-38762 a common vulnerability?
CSRF vulnerabilities like CVE-2024-38762 are relatively common in web applications that do not implement proper validation techniques.