← CVE Intelligence

CVE-2024-1295

The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access PUBLISHED

Description (CNA)

The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn't have access to. (e.g. password-protected events, drafts, etc.)

Affected (CNA)

Vendor / productVersions
Unknown / events-calendar-proaffected 0 before 6.4.0.1
Unknown / The Events Calendaraffected 0 before 6.4.0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.