CVE-2021-24585

Medium

Description

The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sensitive data) of the user related to the Even Head of the Timeslot in the response when requesting the event Timeslot data with a user with the edit_posts capability. Combined with the other Unauthorised Event Timeslot Modification issue (https://wpscan.com/reports/submissions/4699/) where an arbitrary user ID can be set, this could allow low privilege users with the edit_posts capability (such as author) to retrieve sensitive User data by iterating over the user_id

SeverityMedium

CVSS6.5

Exploit probability—

ProductMotopress Timetable And Event Schedule

PublishedSep 20, 2021

First seenSep 20, 2021

Weakness typeCWE-200Sensitive information exposure

How to fix

Update

motopress timetable_and_event_schedule2.4.0 or later

Affected products

Product	Affected versions	Fixed in
motopress timetable_and_event_schedule	v < 2.4.0	2.4.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.