| Package | Affected versions | Patched versions |
|---|---|---|
| eventon | < 2.1.2 | 2.1.2 |
The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free