This vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-api arises from missing authorization checks, leading to incorrect access control enforcement. This could allow unauthorized users to access certain functionalities or data that should be restricted. The issue affects versions up to 6.5.6. The CVSS score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or vendor advisory detailing remediation is currently available.

The vulnerability could allow unauthorized access to features or data exposed by the Display Eventbrite Events widget due to missing authorization controls. The impact is limited to confidentiality loss without integrity or availability impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to mitigate unauthorized access risks. Monitor vendor channels for updates or patches addressing this issue.