blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2023-1129

MEDIUM 6.5 CVSS 3.1
Published
April 24, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

The WP FEvents Book WordPress plugin through 0.46 does not ensures that bookings to be updated belong to the user making the request, allowing any authenticated user to book, add notes, or cancel booking on behalf of other users.

Affected products and versions

  • Unknown WP FEvents Book — Up to and including 0.46
  • wp_fevents_book_project wp_fevents_book — Up to and including 0.46

References

  • wpscan.com https://wpscan.com/vulnerability/d40479de-fb04-41b8-9fb0-41b9eefbd8af Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record