CVE-2023-2796 — EventON < 2.1.2 - Unauthenticated Event Access
The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and…
Published: 2023-07-10 · CVSS: Unscored
The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7