MEDIUM✓ PATCH🇬🇧 English

CVE-2025-39482

CVSS 4.3v3.1pub. 2025-05-16upd. 2026-04-23

Missing Authorization vulnerability in imithemes Eventer eventer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventer: from n/a through < 3.11.4.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

  • Imithemes Eventer

    APP
    Imithemes
    ≤ 3.9.6
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2025-39481CRITICAL9.3PL ✓ten sam produkt

Blind SQL Injection w pluginie WordPress Eventer (imithemes)

CVE-2025-0959HIGH8.8ten sam produkt

The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via...

CVE-2025-22635HIGH7.1ten sam produkt

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imitheme...

CVE-2024-11135HIGH7.5ten sam produkt

The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventer_get_...

CVE-2024-11134MEDIUM4.3ten sam produkt

The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability chec...