CVE Database /
CVE-2024-30515
CVE · High
CVE-2024-30515 — Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 6.4.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-30515
|
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 6.4.7 |
Missing Authorization |
High
8.8
|
< 6.4.7
|
6.4.7 |
2024-03-28 |
—
|
CVE-2024-30515
The Events Manager plugin for WordPress versions before 6.4.7 contains a broken access control vulnerability discovered by Abdi Pranata that permits unauthenticated or low-privilege users to perform actions reserved for higher-privilege accounts due to missing authorization checks, nonce validation, or authentication controls. This flaw was remedied in version 6.4.7 and site administrators should update their installations to this release or later to address the issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings