Extension WordPress

Vulnérabilités Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered), page 2

Cette page rassemble les failles publiées pour Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered), leurs plages de versions affectées et les correctifs signalés dans la base locale.

24Vulnérabilités
1Critiques
24Avec correctif
9,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)

24 fiches

CVE-2024-6033 Moyenne · 4,3
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)

Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 – Missing Authorization to Authenticated (Contributor+) Event Data Import

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized data importation due to a missing capability check on the 'import_file' function in all versions up to, and including, 4.0.4. This makes…

Versions affectées

*-4.0.4

Correctif

4.0.5

Publication

16/07/2024

CVE-2024-37507 Moyenne · 6,4
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)

Eventin <= 3.3.57 – Authenticated (Author+) Stored Cross-Site Scripting

The Eventin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.57 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above,…

Versions affectées

*-3.3.57

Correctif

4.0.0

Publication

04/07/2024

CVE-2024-1122 Moyenne · 5,3
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)

Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 – Missing Authorization to Unauthenticated Events Export

The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_data() function in all versions up to, and including,…

Versions affectées

*-3.3.50

Correctif

3.3.51

Publication

08/02/2024

CVE-2023-49756 Informationnelle
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)

Eventin <= 3.3.52 – Missing Authorization

The Eventin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the import_file() function in versions up to, and including, 3.3.52. This makes it possible for authenticated attackers, with subscriber-level access and…

Versions affectées

*-3.3.52

Correctif

3.3.53

Publication

04/12/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités