Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-1122 | Event Manager, Events Calendar, Events Tickets for WooCommerce Plugin Events Export authorization (ID 3033231)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in Event Manager, Events Calendar, Events Tickets for WooCommerce Plugin up to 3.3.50 on WordPress and classified as critical. Affected by this issue is some unknown functionality of the component Events Export. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2024-1122. The attack may be launched remotely. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2015-6670 | ownCloud Server up to 7.0.7/8.0.5/8.1.0 Calendar apps/calendar/export.php calid authorization (ID 86430 / ID 175528)


📈 43.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28422 | MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce cross site scripting


📈 41.82 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1122 | Event Manager, Events Calendar, Events Tickets for WooCommerce Plugin Events Export authorization (ID 3033231)


📈 39.47 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-7068 | webtoffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin Order Export authorization


📈 38.62 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1194 | Mobile Events Manager Plugin up to 1.4.7 on WordPress Event Export csv injection


📈 36.84 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2017-17616: Event calendar category script project Event calendar category script


📈 36.21 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2518 | Stockists Manager for Woocommerce Plugin up to 1.0.2.1 on Woocommerce stockist_settings_main cross-site request forgery


📈 35.64 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-47777 | Automattic WooCommerce Plugin/WooCommerce Blocks Plugin on WordPress cross site scripting


📈 35.61 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-6360 | My Calendar Plugin up to 3.4.21 on WordPress /my-calendar/v1/events sql injection


📈 35.57 Punkte
🕵️ Sicherheitslücken

🕵️ Modern Events Calendar Lite Plugin up to 5.16.4 on WordPress Export access control


📈 35.24 Punkte
🕵️ Sicherheitslücken

🕵️ event-tickets Plugin up to 4.10.7.1 on WordPress Export CSV Injection privilege escalation


📈 35.22 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-52142 | Cool Plugins Events Shortcodes for the Events Calendar Plugin up to 2.3.1 on WordPress sql injection


📈 32.1 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-5485 | Modern Tribe Eventbrite Tickets Plugin up to 3.10.1 on WordPress Event Import Page import-eventbrite-events.php error cross site scripting (ID 132676)


📈 32.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28492 | CodePeople CP Multi View Event Calendar Plugin up to 1.4.10 on WordPress authorization


📈 32.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-47681 | QuadLayers WooCommerce Checkout Manager Plugin up to 7.3.0 on WordPress authorization


📈 31.74 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3796 | Events Calendar Plugin on WordPress Event post.php title/body cross site scripting


📈 31.11 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-43491 | Advanced Dynamic Pricing for WooCommerce Plugin up to 4.1.5 on WooCommerce Setting cross-site request forgery


📈 30.71 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-30492 | Vark Minimum Purchase for WooCommerce Plugin up to 2.0.0.1 on WooCommerce cross site scripting


📈 30.71 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-51505 | realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce Store Plugin deserialization


📈 30.71 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-51480 | realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store Plugin cross site scripting


📈 30.71 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-4060 | Web-scripts Visual Events Calendar 1.1 calendar.php cfg_dir file inclusion (EDB-2141 / XFDB-28267)


📈 30.67 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-40128 | Advanced Order Export For WooCommerce Plugin up to 3.3.2 on WordPress cross-site request forgery


📈 30.19 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-3603 | Export Customers List CSV for WooCommerce Plugin up to 2.0.68 on WordPress csv injection


📈 30.19 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-46802 | WebToffee Product Reviews Import Export for WooCommerce Plugin csv injection


📈 30.19 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-47547 | WPFactory Products, Order & Customers Export for WooCommerce Plugin cross site scripting


📈 30.19 Punkte
🕵️ Sicherheitslücken

🕵️ Wachipi WP Events Calendar Plugin 1.0 on WordPress event.php event_id sql injection


📈 29.96 Punkte
🕵️ Sicherheitslücken

🕵️ Events Manager Plugin bis 5.8.1.1 auf WordPress events-manager.js mapTitle Cross Site Scripting


📈 29.81 Punkte
🕵️ Sicherheitslücken

🕵️ Events Manager Plugin bis 5.8.1.1 auf WordPress events-manager.js mapTitle Cross Site Scripting


📈 29.81 Punkte
🕵️ Sicherheitslücken

🕵️ Events Manager Plugin up to 5.8.1.1 on WordPress events-manager.js mapTitle cross site scripting


📈 29.81 Punkte
🕵️ Sicherheitslücken

🕵️ Automattic WooCommerce plugin up to 3.4.5 on WordPress Privilege Check woocommerce.php denial of service


📈 29.57 Punkte
🕵️ Sicherheitslücken

📰 Misconfiguring Google Calendar Reveals Calendar Events Publicly


📈 29.53 Punkte
📰 IT Security Nachrichten

🍏 Importer for Calendar 1.0 - Turns spreadsheets into calendar events.


📈 29.53 Punkte
🍏 iOS / Mac OS

⚠️ [webapps] - WordPress Plugin Order Export Import for WooCommerce - Order Information Disclosure


📈 29.04 Punkte
⚠️ PoC

⚠️ [webapps] - WordPress Plugin Order Export Import for WooCommerce - Order Information Disclosure


📈 29.04 Punkte
⚠️ PoC

⚠️ #0daytoday #Wordpress Advanced Order Export For WooCommerce Plugin < 1.5.4 - CSV Injecti [#0day #Exploit]


📈 29.04 Punkte
⚠️ PoC

matomo
•