CVE-2024-5333

The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure PUBLISHED

Description (CNA)

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events.

Affected (CNA)

Vendor / product	Versions
Unknown / The Events Calendar	affected 0 before 6.8.2.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/764b5a23-8b51-4882-b899-beb54f684984/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.