WordPress Plugin Vulnerabilities

Event Monster < 1.4.4 - Unauthenticated Information Exposure

Description

The plugin is vulnerable to Sensitive Information Exposure, allowing unauthenticated attackers to extract sensitive user or configuration data.

Affects Plugins

Plugin icon
event-monster
Fixed in 1.4.4

References

CVE
CVE-2024-5059
URL
https://patchstack.com/database/vulnerability/event-monster/wordpress-event-monster-plugin-1-4-0-sensitive-data-exposure-vulnerability

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Muhammad Daffa
Verified
No
WPVDB ID
bcb27bc6-d987-4ad0-92a8-b0068f944010

Timeline

Publicly Published
2024-06-19 (about 2 years ago)
Added
2024-06-26 (about 2 years ago)
Last Updated
2024-12-05 (about 1 year ago)

Other

Published
Title
Published
2025-11-07
Title
Academy LMS Pro < 3.3.9 - Unauthenticated Sensitive Information Exposure via 'enqueue_social_login_script'
Published
2026-07-27
Title
WPBot < 8.6.0 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action
Published
2026-03-22
Title
Simple History < 5.24.1 - Unauthenticated Information Exposure
Published
2024-04-03
Title
Beaver Themer < 1.4.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode
Published
2025-10-12
Title
MasterStudy LMS Pro < 4.7.16 - Authenticated (Subscriber+) Information Exposure