Wp Fevents Book
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_fevents_book:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Fevents Book (772178df-2d6e-5d88-90dd-cb154beb66de) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1129 |
vulnerable | 2026-06-08 05:52:33.929187 |
WP FEvents Book <= 0.46 - Subscriber+ Arbitrary Booking Manipulation via IDOR
The WP FEvents Book WordPress plugin through 0.46 does not ensures that bookings to be updated belong to the user making the request, allowing any authenticated user to book, add notes, or cancel booking on behalf of other users.
Published: 2023-04-24T18:30:52.240Z
Updated: 2025-02-04T18:38:47.208Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1126 |
vulnerable | 2026-06-08 05:52:33.927477 |
WP FEvents Book <= 0.46 - Subscriber+ Stored XSS
The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks
Published: 2023-04-24T18:30:55.522Z
Updated: 2025-02-04T17:23:13.197Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.