CyberRota Analysis
AI-GeneratedThe Events Made Easy WordPress plugin prior to version 3.1.4 is vulnerable due to inadequate authorization checks, allowing unauthenticated attackers to modify personal data records by exploiting unauthenticated data-change requests. This could lead to unauthorized data manipulation, impacting user privacy and data integrity. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential risks.
Original NVD Description
The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an unauthenticated data-change request, relying only on a public nonce with no per-record token or ownership check, allowing unauthenticated attackers to overwrite the personal data of any person record.