blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2024-1319

MEDIUM 4.3 CVSS 3.1
Published
March 4, 2024
Last modified
June 17, 2026
NVD status
Analyzed
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).

Affected products and versions

  • Unknown Events Tickets Plus — Before 5.9.1
  • liquidweb event_tickets — Before 5.9.1

References

  • wpscan.com https://wpscan.com/vulnerability/5904dc7e-1058-4c40-bca3-66ba57b1414b/ Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record