CVE-2024-8700 in Event Calendar Plugin

Riassunto

di MITRE • 16/05/2025

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 11/09/2024
• Divulgazione: 16/05/2025
• Moderazione: accettato
• Voce: VDB-301002
• CPE: pronto
• CWE: CWE-862 (confermato)
• CVSS: 6.5 (VulDB)
• EPSS: 0.00453
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Hospital, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-8700
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-8700
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-8700/