Threat Entry Updated 2025-01-31

CVE-2024-13216 - Ht Event Plugin

The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.7 via the 'render' function in /includes/widgets/htevent_sponsor.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data.

PLUGIN Ht Event

CVE-2024-13216

MEDIUM CVSS 4.3 2025-01-31

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-02-14

CVE-2023-0496 - Ht Event Plugin

The HT Event WordPress plugin before 1.4.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

PLUGIN Ht Event

CVE-2023-0496

MEDIUM CVSS 4.3 2023-03-27

Risk Score

Open Full Technical Breakdown