CVE-2024-1319

CVE-2024-1319 is a medium-severity vulnerability affecting the Events Tickets Plus WordPress plugin prior to version 5.9.1. It allows authenticated users with at least contributor-level privileges to access and leak the attendees list for any post type, regardless of its status (e.g., draft, private). The attack vector is network-based with low attack complexity, requiring low privileges and no user interaction, potentially leading to a limited disclosure of confidential information. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.