Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-1295

The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn't have access to. (e.g. password-protected events, drafts, etc.)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown events-calendar-pro

Default version status: unaffected

  • 0 to < 6.4.0.1affected

Unknown The Events Calendar

Default version status: unaffected

  • 0 to < 6.4.0.1affected

References