https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T05:42:06.406856+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-3219 CVE-2023-3219 — EventON < 2.1.2 - Unauthenticated Post Access via IDOR 2026-10-04T05:42:06.428123+00:00

Affected: Unknown EventON

The EventON WordPress plugin before 2.1.2 does not validate that the event_id parameter in its eventon_ics_download ajax action is a valid Event, allowing unauthenticated visitors to access any Post (including unpublished or protected posts) content via the ics export functionality by providing the numeric id of the post.