Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar vulnerabilities
1 known vulnerability in Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar from Magepeopleteam. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
Event Booking Manager for WooCommerce – Sell…: Improper Privilege Management
The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.8 This is due to the mep_grant_shop_manager_access() function hooking user_has_cap and unconditionally granting manage_options whenever an atta