We are using Event On plugin v4.9.12 and have been notified of the vulnerability:
Per Patchstack: Broken Access Control
A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.
Risks
This vulnerability is moderately dangerous and expected to become exploited.
Please see more info at Patchstack website: https://patchstack.com/database/wordpress/plugin/eventon/vulnerability/wordpress-eventon-plugin-4-9-9-broken-access-control-vulnerability-2?_a_id=473
- Aug 29,2025 AT 12:11PM - 16 hours ago