Skip to content

Known CVE

EventON <= 2.1 - Missing Authorization

The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id.

CVE-2023-2796

Medium2023CVSS 5.3CWE-862

cve2023 · wpscan · packetstorm · wordpress · wp-plugin · wp · eventon · bypass

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website