Low · 3.7 CVE-2023-27437 EUVD-2023-31213GHSA-5rxf-8qhp-h9fh

WordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerability

Published Jun 3, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Event Espresso Product: Event Espresso 4 Decaf

Description

Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf allows Functionality Misuse.This issue affects Event Espresso 4 Decaf: from n/a through 4.10.44.Decaf.

Affected products

Vendor	Product	Affected	Fixed
Event Espresso	Event Espresso 4 Decaf	≤ 4.10.44.decaf	—

References

https://patchstack.com/database/vulnerability/event-espresso-decaf/wordpress-event-espresso-4-decaf-plugin-4-10-44-decaf-bypass-vulnerability?_s_id=cve vdb-entry