Liedekef Events Made Easy vulnerabilities

1 known vulnerability affecting liedekef/events_made_easy.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-0404MEDIUMCVSS 5.4≤ 2.3.162023-01-19

CVE-2023-0404 [MEDIUM] CWE-862 CVE-2023-0404: The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing cap The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions related to AJAX actions in versions up to, and including, 2.3.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke those functions intended for administrator us