CyberRota Analysis
AI-GeneratedThe Eventin WordPress plugin prior to version 4.1.21 has a vulnerability that allows users with contributor-level access and above to modify, delete, or reassign events created by other users, including administrators, due to improper ownership verification. This could lead to unauthorized alterations of critical event data, potentially compromising the integrity of event management within affected WordPress sites. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and above to alter, delete, or take over events created by other users including administrators.