https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 21:25:50 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-109994 <p>The Eventin – Events Calendar, Tickets, Registration, Booking &amp; WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.1.29 via the &#39;id&#39; parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the email address and phone number of any WordPress user, including administrators, by supplying their user id in a query-string parameter while placing the authenticated user&#39;s own id in the URL path.</p> <p>The Eventin – Events Calendar, Tickets, Registration, Booking &amp; WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.1.29 via the &#39;id&#39; parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the email address and phone number of any WordPress user, including administrators, by supplying their user id in a query-string parameter while placing the authenticated user&#39;s own id in the URL path.</p> https://db.gcve.eu/vuln/fkie_cve-2026-109994 https://db.gcve.eu/vuln/ghsa-8w3v-fw7p-fr8m <p>The Eventin – Events Calendar, Tickets, Registration, Booking &amp; WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.1.29 via the &#39;id&#39; parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the email address and phone number of any WordPress user, including administrators, by supplying their user id in a query-string parameter while placing the authenticated user&#39;s own id in the URL path.</p> <p>The Eventin – Events Calendar, Tickets, Registration, Booking &amp; WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.1.29 via the &#39;id&#39; parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the email address and phone number of any WordPress user, including administrators, by supplying their user id in a query-string parameter while placing the authenticated user&#39;s own id in the URL path.</p> https://db.gcve.eu/vuln/ghsa-8w3v-fw7p-fr8m