CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMinds Simple WP Events simple-wp-events allows Path Traversal.This issue affects Simple WP Events: from n/a through <= 1.8.17.
Explanation of Vulnerability in Simple Terms
Simple WP Events versions 1.8.17 and earlier contain a path traversal vulnerability that allows unauthenticated attackers to disrupt site availability. An attacker can send specially crafted requests over the network to cause a denial of service without needing to log in or interact with a user. No user data is exposed, but the site may become unavailable.
What an attacker can do
Make the site unavailable by sending malicious requests that exploit a path traversal flaw.
Potential impact on your site
Your site may go offline or become unresponsive until the plugin is patched and restarted.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
