WordPress Plugin Vulnerabilities

Eventer < 3.9.8 - Authenticated (Subscriber+) Arbitrary File Read

Description

The Eventer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.9.7 via the eventer_woo_download_tickets() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

Affects Plugins

Plugin icon
eventer
Fixed in 3.9.8

References

CVE
CVE-2024-10799
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/aea5f970-243f-4642-83e1-34db11c4ca63

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22
CVSS
6.5 (medium)

Miscellaneous

Original Researcher
Tonn
Verified
No
WPVDB ID
2fda5dc3-4e54-4755-96e3-5ec6d3686429

Timeline

Publicly Published
2025-01-16 (about 1 year ago)
Added
2025-01-16 (about 1 year ago)
Last Updated
2025-01-17 (about 1 year ago)

Other

Published
Title
Published
2017-02-10
Title
Javo Spot Premium Theme - Unauthenticated Directory Traversal
Published
2016-09-07
Title
WordPress 2.8-4.6 - Path Traversal in Upgrade Package Uploader
Published
2025-07-10
Title
Pro Bulk Watermark Plugin for WordPress <= 2.0 - Authenticated (Subscriber+) Path Traversal
Published
2024-08-19
Title
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion
Published
2024-12-17
Title
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary Directory Deletion