CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through <= 2.7.16.
Explanation of Vulnerability in Simple Terms
WP Chill RSVP and Event Management versions up to 2.7.16 expose sensitive information through improper data exposure. An attacker can read non-public data without authentication by sending network requests to the vulnerable component. The exposure is limited to confidentiality; integrity and availability are not affected. Update to a version newer than 2.7.16.
What an attacker can do
Read sensitive information from the plugin without logging in.
Potential impact on your site
Visitor data, event details, or other non-public information may be exposed to unauthenticated attackers.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
