CVE-2024-13457 | theeventscalendar Event Tickets and Registration Plugin up to 5.18.1 on WordPress Object Reference tc-order-id access control

A vulnerability was found in theeventscalendar Event Tickets and Registration Plugin up to 5.18.1 on WordPress and classified as critical. This issue affects some unknown processing of the component Object Reference Handler. The manipulation of the argument tc-order-id leads to improper access controls.

The identification of this vulnerability is CVE-2024-13457. The attack may be initiated remotely. There is no exploit available.