Vulnerabilities > CVE-2021-24146 - Missing Authorization vulnerability in Webnus Modern Events Calendar Lite

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

webnus

CWE-862

NVD

Published: 2021-03-18

Updated: 2022-08-30

Summary

Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.

Vulnerable Configurations

Part	Description	Count
Application	Webnus Webnus Modern Events Calendar Lite 3.1.0 Webnus Modern Events Calendar Lite 3.1.1 Webnus Modern Events Calendar Lite 3.1.2 Webnus Modern Events Calendar Lite 3.1.3 Webnus Modern Events Calendar Lite 3.1.4 Webnus Modern Events Calendar Lite 3.1.5 Webnus Modern Events Calendar Lite 3.1.6 Webnus Modern Events Calendar Lite 3.2.0 Webnus Modern Events Calendar Lite 3.3.0 Webnus Modern Events Calendar Lite 3.3.5 Webnus Modern Events Calendar Lite 3.4.0 Webnus Modern Events Calendar Lite 3.4.5 Webnus Modern Events Calendar Lite 3.5.0 Webnus Modern Events Calendar Lite 3.5.1 Webnus Modern Events Calendar Lite 3.5.2 Webnus Modern Events Calendar Lite 4.0.0 Webnus Modern Events Calendar Lite 4.1.0 Webnus Modern Events Calendar Lite 4.2.0 Webnus Modern Events Calendar Lite 4.2.1 Webnus Modern Events Calendar Lite 4.2.3 Webnus Modern Events Calendar Lite 4.2.4 Webnus Modern Events Calendar Lite 4.2.5 Webnus Modern Events Calendar Lite 4.3.0 Webnus Modern Events Calendar Lite 4.3.1 Webnus Modern Events Calendar Lite 4.3.2 Webnus Modern Events Calendar Lite 4.3.5 Webnus Modern Events Calendar Lite 4.3.6 Webnus Modern Events Calendar Lite 4.4.0 Webnus Modern Events Calendar Lite 4.4.5 Webnus Modern Events Calendar Lite 4.4.6 Webnus Modern Events Calendar Lite 4.4.7 Webnus Modern Events Calendar Lite 4.4.8 Webnus Modern Events Calendar Lite 4.4.9 Webnus Modern Events Calendar Lite 4.5.1 Webnus Modern Events Calendar Lite 4.6.0 Webnus Modern Events Calendar Lite 4.6.5 Webnus Modern Events Calendar Lite 4.7.0 Webnus Modern Events Calendar Lite 4.7.1 Webnus Modern Events Calendar Lite 4.7.5 Webnus Modern Events Calendar Lite 4.7.6 Webnus Modern Events Calendar Lite 4.7.7 Webnus Modern Events Calendar Lite 4.8.0 Webnus Modern Events Calendar Lite 4.8.1 Webnus Modern Events Calendar Lite 4.8.2 Webnus Modern Events Calendar Lite 4.8.3 Webnus Modern Events Calendar Lite 4.8.5 Webnus Modern Events Calendar Lite 4.9.0 Webnus Modern Events Calendar Lite 4.9.5 Webnus Modern Events Calendar Lite 5.0.0 Webnus Modern Events Calendar Lite 5.0.1 Webnus Modern Events Calendar Lite 5.0.2 Webnus Modern Events Calendar Lite 5.0.5 Webnus Modern Events Calendar Lite 5.1.0 Webnus Modern Events Calendar Lite 5.1.5 Webnus Modern Events Calendar Lite 5.1.6 Webnus Modern Events Calendar Lite 5.1.7 Webnus Modern Events Calendar Lite 5.1.8 Webnus Modern Events Calendar Lite 5.2.0 Webnus Modern Events Calendar Lite 5.2.1 Webnus Modern Events Calendar Lite 5.2.2 Webnus Modern Events Calendar Lite 5.2.3 Webnus Modern Events Calendar Lite 5.2.5 Webnus Modern Events Calendar Lite 5.2.6 Webnus Modern Events Calendar Lite 5.2.7 Webnus Modern Events Calendar Lite 5.3.0 Webnus Modern Events Calendar Lite 5.3.5 Webnus Modern Events Calendar Lite 5.4.0 Webnus Modern Events Calendar Lite 5.4.5 Webnus Modern Events Calendar Lite 5.4.6 Webnus Modern Events Calendar Lite 5.5.0 Webnus Modern Events Calendar Lite 5.6.0 Webnus Modern Events Calendar Lite 5.6.1 Webnus Modern Events Calendar Lite 5.6.5 Webnus Modern Events Calendar Lite 5.7.0 Webnus Modern Events Calendar Lite 5.7.5 Webnus Modern Events Calendar Lite 5.8.0 Webnus Modern Events Calendar Lite 5.8.5 Webnus Modern Events Calendar Lite 5.9.0 Webnus Modern Events Calendar Lite 5.9.5 Webnus Modern Events Calendar Lite 5.10.0 Webnus Modern Events Calendar Lite 5.10.5 Webnus Modern Events Calendar Lite 5.11.0 Webnus Modern Events Calendar Lite 5.11.5 Webnus Modern Events Calendar Lite 5.12.0 Webnus Modern Events Calendar Lite 5.12.5 Webnus Modern Events Calendar Lite 5.12.6 Webnus Modern Events Calendar Lite 5.13.0 Webnus Modern Events Calendar Lite 5.13.1 Webnus Modern Events Calendar Lite 5.13.5 Webnus Modern Events Calendar Lite 5.13.6 Webnus Modern Events Calendar Lite 5.14.0 Webnus Modern Events Calendar Lite 5.15.0 Webnus Modern Events Calendar Lite 5.15.5 Webnus Modern Events Calendar Lite 5.16.0 Webnus Modern Events Calendar Lite 5.16.1 Webnus Modern Events Calendar Lite 5.16.2	96

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References