漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
Vulnerability Description
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress Plugins Event Tickets and Registration 安全漏洞
Vulnerability Description
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress Plugins Event Tickets and Registration 5.8.1之前版本存在安全漏洞,该漏洞源于不会阻止至少具有贡献者角色的用户泄露他们不应访问的某些事件信息。
CVSS Information
N/A
Vulnerability Type
N/A