Vulnerabilities and Security Researches

The Events Calendar, CVE-2024-5333

CVE, Research URL: CVE-2024-5333
Home page URL: Security reports for The Events Calendar
Application: The Events Calendar
Published on: Dec 16, 2024
Research Description: The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events.
Affected versions: max 6.8.2.1.
Status: vulnerable