Medium · 6.4 CVE-2024-43143 EUVD-2024-40070GHSA-ghvj-wh2c-8cw6

WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Roundup WP Product: Registrations for the Events Calendar

Description

Missing Authorization vulnerability in Roundup WP Registrations for the Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Registrations for the Events Calendar: from n/a through 2.12.1.

Affected products

Vendor	Product	Affected	Fixed
Roundup WP	Registrations for the Events Calendar	≤ 2.12.1	—

References

https://patchstack.com/database/vulnerability/registrations-for-the-events-calendar/wordpress-registrations-for-the-events-calendar-plugin-2-12-1-broken-access-control-vulnerability?_s_id=cve vdb-entry