Threats tagged 'ghsa-37mv-4698-66mw'

A missing authorization vulnerability exists in Liquid Web / StellarWP Event Tickets plugin up to version 5.31.0. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized information disclosure. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact primarily affecting confidentiality without impacting integrity or availability.