Fullworks Display Eventbrite Events Plugin Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the Fullworks Display Eventbrite Events WordPress plugin, specifically in versions through 6.5.6. This vulnerability arises from a missing authorization check, allowing unprivileged users to perform actions that require higher privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to restricted functionalities or data within the WordPress site.

Remediation

Users of the Fullworks Display Eventbrite Events WordPress plugin should update to version 6.5.7 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.