Vulnerabilities > CVE-2023-6158 - Missing Authorization vulnerability in Myeventon Eventon

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

LOW

network

low complexity

myeventon

CWE-862

NVD

Published: 2024-01-10

Updated: 2024-01-17

Summary

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the evo_eventpost_update_meta function in all versions up to, and including, 4.5.4 (for Pro) and 2.2.7 (for free). This makes it possible for unauthenticated attackers to update and remove arbitrary post metadata. Note that certain parameters may allow for content injection.

Vulnerable Configurations

Part	Description	Count
Application	Myeventon Myeventon Eventon - Myeventon Eventon 1.0 Myeventon Eventon 1.1 Myeventon Eventon 1.2 Myeventon Eventon 1.3 Myeventon Eventon 1.4 Myeventon Eventon 1.5 Myeventon Eventon 1.6 Myeventon Eventon 1.7 Myeventon Eventon 1.8 Myeventon Eventon 1.9 Myeventon Eventon 2.0 Myeventon Eventon 2.0.1 Myeventon Eventon 2.0.2 Myeventon Eventon 2.0.3 Myeventon Eventon 2.0.4 Myeventon Eventon 2.0.5 Myeventon Eventon 2.0.6 Myeventon Eventon 2.0.7 Myeventon Eventon 2.0.8 Myeventon Eventon 2.1 Myeventon Eventon 2.1.1 Myeventon Eventon 2.1.2 Myeventon Eventon 2.1.3 Myeventon Eventon 2.1.4 Myeventon Eventon 2.1.5 Myeventon Eventon 2.1.6 Myeventon Eventon 2.1.7 Myeventon Eventon 2.1.8 Myeventon Eventon 2.1.9 Myeventon Eventon 2.1.10 Myeventon Eventon 2.1.11 Myeventon Eventon 2.1.12 Myeventon Eventon 2.1.13 Myeventon Eventon 2.1.14 Myeventon Eventon 2.1.15 Myeventon Eventon 2.1.16 Myeventon Eventon 2.1.17 Myeventon Eventon 2.1.18 Myeventon Eventon 2.1.19 Myeventon Eventon 2.2 Myeventon Eventon 2.2.1 Myeventon Eventon 2.2.2 Myeventon Eventon 2.2.3 Myeventon Eventon 2.2.4 Myeventon Eventon 2.2.5 Myeventon Eventon 2.2.6 Myeventon Eventon 2.2.7 Myeventon Eventon 2.2.8 Myeventon Eventon 2.2.9 Myeventon Eventon 2.2.10 Myeventon Eventon 2.2.11 Myeventon Eventon 2.2.12 Myeventon Eventon 2.2.13 Myeventon Eventon 2.2.14 Myeventon Eventon 2.2.15 Myeventon Eventon 2.2.16 Myeventon Eventon 2.2.17 Myeventon Eventon 2.2.18 Myeventon Eventon 2.2.19 Myeventon Eventon 2.2.20 Myeventon Eventon 2.2.21 Myeventon Eventon 2.2.22 Myeventon Eventon 2.2.23 Myeventon Eventon 2.2.24 Myeventon Eventon 2.2.25 Myeventon Eventon 2.2.26 Myeventon Eventon 2.2.27 Myeventon Eventon 2.2.28 Myeventon Eventon 2.2.29 Myeventon Eventon 2.3 Myeventon Eventon 2.3.1 Myeventon Eventon 2.3.2 Myeventon Eventon 2.3.3 Myeventon Eventon 2.3.4 Myeventon Eventon 2.3.5 Myeventon Eventon 2.3.6 Myeventon Eventon 2.3.7 Myeventon Eventon 2.3.8 Myeventon Eventon 2.3.9 Myeventon Eventon 2.3.10 Myeventon Eventon 2.3.11 Myeventon Eventon 2.3.12 Myeventon Eventon 2.3.13 Myeventon Eventon 2.3.14 Myeventon Eventon 2.3.15 Myeventon Eventon 2.3.16 Myeventon Eventon 2.3.17 Myeventon Eventon 2.3.18 Myeventon Eventon 2.3.19 Myeventon Eventon 2.3.20 Myeventon Eventon 2.3.21 Myeventon Eventon 2.3.22 Myeventon Eventon 2.4 Myeventon Eventon 2.4.1 Myeventon Eventon 2.4.2 Myeventon Eventon 2.4.3 Myeventon Eventon 2.4.4 Myeventon Eventon 2.4.5 Myeventon Eventon 2.4.6 Myeventon Eventon 2.4.7 Myeventon Eventon 2.4.8 Myeventon Eventon 2.4.9 Myeventon Eventon 2.4.10 Myeventon Eventon 2.5 Myeventon Eventon 2.5.1 Myeventon Eventon 2.5.2 Myeventon Eventon 2.5.3 Myeventon Eventon 2.5.4 Myeventon Eventon 2.6 Myeventon Eventon 2.6.1 Myeventon Eventon 2.6.2 Myeventon Eventon 2.6.3 Myeventon Eventon 2.6.4 Myeventon Eventon 2.6.5 Myeventon Eventon 2.6.6 Myeventon Eventon 2.6.7 Myeventon Eventon 2.6.8 Myeventon Eventon 2.6.9 Myeventon Eventon 2.6.10 Myeventon Eventon 2.6.11 Myeventon Eventon 2.6.12 Myeventon Eventon 2.6.13 Myeventon Eventon 2.6.14 Myeventon Eventon 2.6.15 Myeventon Eventon 2.6.16 Myeventon Eventon 2.6.17 Myeventon Eventon 2.7 Myeventon Eventon 2.7.1 Myeventon Eventon 2.7.2 Myeventon Eventon 2.7.3 Myeventon Eventon 2.8 Myeventon Eventon 2.8.1 Myeventon Eventon 2.8.2 Myeventon Eventon 2.8.3 Myeventon Eventon 2.8.4 Myeventon Eventon 2.8.5 Myeventon Eventon 2.8.6 Myeventon Eventon 2.8.7 Myeventon Eventon 2.8.8 Myeventon Eventon 2.8.9 Myeventon Eventon 2.8.10 Myeventon Eventon 2.9 Myeventon Eventon 2.9.1 Myeventon Eventon 3.0 Myeventon Eventon 3.0.1 Myeventon Eventon 3.0.2 Myeventon Eventon 3.0.3 Myeventon Eventon 3.0.4 Myeventon Eventon 3.0.5 Myeventon Eventon 3.0.6 Myeventon Eventon 3.0.7 Myeventon Eventon 3.0.8 Myeventon Eventon 3.1 Myeventon Eventon 3.1.1 Myeventon Eventon 3.1.2 Myeventon Eventon 3.1.3 Myeventon Eventon 3.1.4 Myeventon Eventon 3.1.5 Myeventon Eventon 3.1.6 Myeventon Eventon 3.1.7 Myeventon Eventon 4.0 Myeventon Eventon 4.0.1 Myeventon Eventon 4.0.2 Myeventon Eventon 4.0.3 Myeventon Eventon 4.0.4 Myeventon Eventon 4.0.5 Myeventon Eventon 4.0.6 Myeventon Eventon 4.1 Myeventon Eventon 4.1.1 Myeventon Eventon 4.1.2 Myeventon Eventon 4.1.3 Myeventon Eventon 4.2 Myeventon Eventon 4.2.1 Myeventon Eventon 4.2.2 Myeventon Eventon 4.3 Myeventon Eventon 4.3.1 Myeventon Eventon 4.3.2 Myeventon Eventon 4.3.3 Myeventon Eventon 4.3.4 Myeventon Eventon 4.3.5 Myeventon Eventon 4.4 Myeventon Eventon 4.4.1 Myeventon Eventon 4.4.2 Myeventon Eventon 4.4.3 Myeventon Eventon 4.4.4 Myeventon Eventon 4.5 Myeventon Eventon 4.5.1 Myeventon Eventon 4.5.2 Myeventon Eventon 4.5.3 Myeventon Eventon 4.5.4 Myeventon Eventon Lite 1.0 Myeventon Eventon Lite 1.0.1 Myeventon Eventon Lite 1.0.2 Myeventon Eventon Lite 1.0.3 Myeventon Eventon Lite 1.0.4 Myeventon Eventon Lite 2.0 Myeventon Eventon Lite 2.0.1 Myeventon Eventon Lite 2.1 Myeventon Eventon Lite 2.1.2 Myeventon Eventon Lite 2.1.3 Myeventon Eventon Lite 2.1.4 Myeventon Eventon Lite 2.1.5 Myeventon Eventon Lite 2.1.6 Myeventon Eventon Lite 2.1.7 Myeventon Eventon Lite 2.2 Myeventon Eventon Lite 2.2.1 Myeventon Eventon Lite 2.2.2 Myeventon Eventon Lite 2.2.3 Myeventon Eventon Lite 2.2.4 Myeventon Eventon Lite 2.2.5 Myeventon Eventon Lite 2.2.6 Myeventon Eventon Lite 2.2.7	213

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References