CVE-2024-1125

Summary

CVE-2024-1125 is a vulnerability affecting the EventPrime plugin for WordPress. The issue lies in the calendar_events_delete() function, which lacks sufficient capability checks. As a result, authenticated attackers with subscriber-level access or higher can exploit this vulnerability to delete arbitrary posts, causing unauthorized loss of data. This weakness puts WordPress sites using the EventPrime plugin, version 3.4.3 and below, at risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.