Skip to content
OpenAdvisories

Vendor

eventespresso

2 known vulnerabilities.

Products

Event Espresso – Event Registration & Ticketing Sales 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-6883

    Event Espresso 4 Decaf – Event Registration Event Ticketing <= 4.10.46.decaf- Authenticated (Subscriber+) Missing Authorization to Limited Plugin Settings Modification

    The Event Espresso 4 Decaf – Event Registration Event Ticketing plugin for WordPress is vulnerable to limited unauthorized plugin settings modification due to a missing capability check on the saveTimezoneString and some other functions in all versions up to …

    eventespresso Event Espresso – Event Registration & Ticketing Sales Web / CMS
  • Medium 4.3
    CVE-2021-4404

    Event Espresso 4 Decaf <= 4.10.11 - Cross-Site Request Forgery Bypass

    The Event Espresso 4 Decaf plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.10.11. This is due to missing or incorrect nonce validation on the ajaxHandler() function. This makes it possible for unauthenticat…

    eventespresso Event Espresso – Event Registration & Ticketing Sales Web / CMS