CVE-2024-1316: 
WordPress vulnerability analysis and mitigation

The Event Tickets and Registration WordPress plugin before version 5.8.1 and Events Tickets Plus WordPress plugin before version 5.9.1 contain a security vulnerability that affects access controls. The vulnerability was discovered and publicly disclosed on February 8, 2024, by security researcher Scott Kingsley Clark (WPScan).

The vulnerability allows users with at least contributor-level permissions to access and reveal the existence of events they shouldn't have access to, including draft, private, pending review, password-protected, and trashed events. The issue can be exploited using a specific shortcode '[tribe-user-event-confirmations user="ANY_USER_ID"]' which allows unauthorized access to event information. The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (NIST NVD).

The vulnerability allows unauthorized access to sensitive event information, potentially exposing draft, private, pending review, password-protected, and trashed events to users who should not have access to them. This could lead to information disclosure of confidential or pre-release event details (WPScan).

The vulnerability can be exploited by users with contributor-level access or higher by adding a specific shortcode to any post and specifying a user ID. The exploit requires the attacker to have legitimate access to the WordPress installation with at least contributor privileges (WPScan).

The vulnerability has been patched in Event Tickets version 5.8.1 and Event Tickets Plus version 5.9.1. Users are advised to update to these versions or later to protect against this security issue (WPScan).