Description
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Unknown Event Tickets and Registration
Default version status: unaffected
0 to < 5.8.1affected
Unknown Events Tickets Plus
Default version status: unaffected
0 to < 5.9.1affected