Vulnerabilities > CVE-2022-1054 - Missing Authorization vulnerability in Wpchill Rsvp and Event Management

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

wpchill

CWE-862

NVD

Published: 2022-04-18

Updated: 2022-04-27

Summary

The RSVP and Event Management Plugin WordPress plugin before 2.7.8 does not have any authorisation checks when exporting its entries, and has the export function hooked to the init action. As a result, unauthenticated attackers could call it and retrieve PII such as first name, last name and email address of user registered for events

Vulnerable Configurations

Part	Description	Count
Application	Wpchill Wpchill Rsvp AND Event Management - Wpchill Rsvp AND Event Management 0.5.0 Wpchill Rsvp AND Event Management 0.6.0 Wpchill Rsvp AND Event Management 0.7.0 Wpchill Rsvp AND Event Management 0.8.0 Wpchill Rsvp AND Event Management 0.9.0 Wpchill Rsvp AND Event Management 0.9.5 Wpchill Rsvp AND Event Management 1.0.0 Wpchill Rsvp AND Event Management 1.1.0 Wpchill Rsvp AND Event Management 1.2.0 Wpchill Rsvp AND Event Management 1.2.1 Wpchill Rsvp AND Event Management 1.3.0 Wpchill Rsvp AND Event Management 1.3.1 Wpchill Rsvp AND Event Management 1.3.2 Wpchill Rsvp AND Event Management 1.5.0 Wpchill Rsvp AND Event Management 1.6.0 Wpchill Rsvp AND Event Management 1.6.1 Wpchill Rsvp AND Event Management 1.6.2 Wpchill Rsvp AND Event Management 1.6.5 Wpchill Rsvp AND Event Management 1.7.0 Wpchill Rsvp AND Event Management 1.7.2 Wpchill Rsvp AND Event Management 1.7.3 Wpchill Rsvp AND Event Management 1.7.4 Wpchill Rsvp AND Event Management 1.7.5 Wpchill Rsvp AND Event Management 1.7.6 Wpchill Rsvp AND Event Management 1.7.7 Wpchill Rsvp AND Event Management 1.7.8 Wpchill Rsvp AND Event Management 1.7.9 Wpchill Rsvp AND Event Management 1.8.0 Wpchill Rsvp AND Event Management 1.8.1 Wpchill Rsvp AND Event Management 1.8.2 Wpchill Rsvp AND Event Management 1.8.3 Wpchill Rsvp AND Event Management 1.8.4 Wpchill Rsvp AND Event Management 1.8.5 Wpchill Rsvp AND Event Management 1.8.6 Wpchill Rsvp AND Event Management 1.8.7 Wpchill Rsvp AND Event Management 1.8.8 Wpchill Rsvp AND Event Management 1.8.9 Wpchill Rsvp AND Event Management 1.9.0 Wpchill Rsvp AND Event Management 1.9.1 Wpchill Rsvp AND Event Management 1.9.2 Wpchill Rsvp AND Event Management 1.9.3 Wpchill Rsvp AND Event Management 1.9.4 Wpchill Rsvp AND Event Management 1.9.5 Wpchill Rsvp AND Event Management 1.9.6 Wpchill Rsvp AND Event Management 1.9.7 Wpchill Rsvp AND Event Management 1.9.8 Wpchill Rsvp AND Event Management 1.9.9 Wpchill Rsvp AND Event Management 2.0.0 Wpchill Rsvp AND Event Management 2.0.1 Wpchill Rsvp AND Event Management 2.0.2 Wpchill Rsvp AND Event Management 2.0.3 Wpchill Rsvp AND Event Management 2.0.4 Wpchill Rsvp AND Event Management 2.0.5 Wpchill Rsvp AND Event Management 2.0.6 Wpchill Rsvp AND Event Management 2.0.7 Wpchill Rsvp AND Event Management 2.0.8 Wpchill Rsvp AND Event Management 2.0.9 Wpchill Rsvp AND Event Management 2.1.0 Wpchill Rsvp AND Event Management 2.1.1 Wpchill Rsvp AND Event Management 2.1.2 Wpchill Rsvp AND Event Management 2.1.3 Wpchill Rsvp AND Event Management 2.1.4 Wpchill Rsvp AND Event Management 2.1.5 Wpchill Rsvp AND Event Management 2.1.6 Wpchill Rsvp AND Event Management 2.1.7 Wpchill Rsvp AND Event Management 2.1.8 Wpchill Rsvp AND Event Management 2.1.9 Wpchill Rsvp AND Event Management 2.2.0 Wpchill Rsvp AND Event Management 2.2.1 Wpchill Rsvp AND Event Management 2.2.2 Wpchill Rsvp AND Event Management 2.2.3 Wpchill Rsvp AND Event Management 2.2.4 Wpchill Rsvp AND Event Management 2.2.5 Wpchill Rsvp AND Event Management 2.2.6 Wpchill Rsvp AND Event Management 2.2.7 Wpchill Rsvp AND Event Management 2.2.8 Wpchill Rsvp AND Event Management 2.2.9 Wpchill Rsvp AND Event Management 2.3.0 Wpchill Rsvp AND Event Management 2.3.1 Wpchill Rsvp AND Event Management 2.3.2 Wpchill Rsvp AND Event Management 2.3.3 Wpchill Rsvp AND Event Management 2.3.4 Wpchill Rsvp AND Event Management 2.3.5 Wpchill Rsvp AND Event Management 2.3.6 Wpchill Rsvp AND Event Management 2.3.7 Wpchill Rsvp AND Event Management 2.3.8 Wpchill Rsvp AND Event Management 2.3.9 Wpchill Rsvp AND Event Management 2.4.0 Wpchill Rsvp AND Event Management 2.4.1 Wpchill Rsvp AND Event Management 2.4.2 Wpchill Rsvp AND Event Management 2.4.3 Wpchill Rsvp AND Event Management 2.4.4 Wpchill Rsvp AND Event Management 2.4.5 Wpchill Rsvp AND Event Management 2.4.6 Wpchill Rsvp AND Event Management 2.4.7 Wpchill Rsvp AND Event Management 2.4.8 Wpchill Rsvp AND Event Management 2.4.9 Wpchill Rsvp AND Event Management 2.5.0 Wpchill Rsvp AND Event Management 2.5.1 Wpchill Rsvp AND Event Management 2.5.2 Wpchill Rsvp AND Event Management 2.5.3 Wpchill Rsvp AND Event Management 2.5.4 Wpchill Rsvp AND Event Management 2.5.5 Wpchill Rsvp AND Event Management 2.5.7 Wpchill Rsvp AND Event Management 2.5.8 Wpchill Rsvp AND Event Management 2.5.9 Wpchill Rsvp AND Event Management 2.6.0 Wpchill Rsvp AND Event Management 2.6.1 Wpchill Rsvp AND Event Management 2.6.2 Wpchill Rsvp AND Event Management 2.6.3 Wpchill Rsvp AND Event Management 2.6.4 Wpchill Rsvp AND Event Management 2.6.5 Wpchill Rsvp AND Event Management 2.6.6 Wpchill Rsvp AND Event Management 2.6.7 Wpchill Rsvp AND Event Management 2.6.8 Wpchill Rsvp AND Event Management 2.6.9 Wpchill Rsvp AND Event Management 2.7.0 Wpchill Rsvp AND Event Management 2.7.1 Wpchill Rsvp AND Event Management 2.7.2 Wpchill Rsvp AND Event Management 2.7.3 Wpchill Rsvp AND Event Management 2.7.4 Wpchill Rsvp AND Event Management 2.7.5 Wpchill Rsvp AND Event Management 2.7.6 Wpchill Rsvp AND Event Management 2.7.7	125

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

References

https://wpscan.com/vulnerability/95a5fad1-e823-4571-8640-19bf5436578d