← Back to CVE List

CVE-2024-0236

Published: 2024-01-16T16:15Z
Last Modified: 2024-11-21T08:46Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set (for example for Zoom) > MITRE Terms of Use apply – see LICENSE‑MITRE.txt