CVE-2024-8700

Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion

High · published May 15, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00473 · 39.9th percentile
Published
2025-05-15T20:07Z
EPSS history
Timeline
  • 15 MAY 20:07Z
    Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion
    cvelistv5