PT-2024-38111 · WordPress · Eventin

Matthew Rollings

+1

·

Published

2024-09-27

·

Updated

2024-10-04

·

CVE-2024-7149

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress versions up to, and including, 4.0.8
Description The Eventin plugin for WordPress is vulnerable to Local File Inclusion via multiple style parameters. This allows authenticated attackers with Contributor-level access and above to include and execute arbitrary files on the server, enabling the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
Recommendations For versions up to, and including, 4.0.8, update to a version later than 4.0.8 to resolve the issue. As a temporary workaround, consider restricting access to the style parameters to minimize the risk of exploitation. Restrict file uploads to only necessary file types and ensure proper validation and sanitization of uploaded files to prevent code execution.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-7149

Affected Products

Eventin