CVE-2024-0238

Published: 2024-01-16T16:15Z

Last Modified: 2024-11-21T08:46Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The EventON Premium WordPress plugin before 4.5.6, EventON WordPress plugin before 2.2.8 do not have authorisation in an AJAX action, and does not ensure that the post to be updated belong to the plugin, allowing unauthenticated users to update arbitrary post metadata. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt