CVE-2024-8700 in Event Calendar Plugin

Tóm tắt

Bởi MITRE • 16/05/2025

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Đặt trước: 11/09/2024
• Tiết lộ: 16/05/2025
• Kiểm duyệt: được chấp nhận
• mục: VDB-301002
• CPE: sẵn sàng
• CWE: CWE-862 (Đã xác nhận)
• CVSS: 6.5 (VulDB)
• EPSS: 0.00453
• KEV: không
• Các hoạt động: rất thấp
• ngành: Hostingprovider, Finance, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-8700
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-8700
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-8700/