Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2024-0237

The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated users to update virtual events settings, such as meeting URL, moderator, access details etc

  • Published: Jan 16, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-0237
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWEs:

Software From Fixed in
myeventon / eventon - 2.2.7
myeventon / eventon 4.0 4.5.5