https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:34:46.239608+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2796 CVE-2023-2796 — EventON < 2.1.2 - Unauthenticated Event Access 2026-10-05T15:34:46.254994+00:00

Affected: Unknown EventON

The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id.