The Events Calendar, 392171a3fe3230ecf0fc8e8d795071740c32dffe

CVE, Research URL: 392171a3fe3230ecf0fc8e8d795071740c32dffe
Home page URL: Security reports for The Events Calendar
Application: The Events Calendar
Published on: Nov 20, 2023
Research Description: The Events Calendar [the-events-calendar] < 6.2.8.1 The Events Calendar <= 6.2.8 - Information Disclosure The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 6.2.8 via the get_data function. This makes it possible for unauthenticated attackers to extract sensitive data including private post content, via the REST API.
Affected versions: max 6.2.8.1.
Status: vulnerable