CVE-2024-11133

Summary

CVE-2024-11133 is a vulnerability affecting the Eventer plugin for WordPress. The issue lies in the 'handle_pdf_download_request' function, which lacks necessary capability checks. Consequently, unauthenticated attackers can exploit this vulnerability to gain unauthorized access to event tickets, posing a significant risk to the confidentiality of tickets and potential financial losses for affected organizations. This vulnerability has been identified in all versions up to and including 3.9.9. It is recommended that users update to the latest version of the Eventer plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.