CVE-2024-1295

2024-06-1406:15:10

[email protected]

web.nvd.nist.gov

wordpress

security

vulnerability

events calendar

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn’t have access to. (e.g. password-protected events, drafts, etc.)

Affected configurations

Vulners

Node

google_calendar_events_projectgoogle_calendar_eventsRange<6.4.0.1

coolpluginsevents_search_for_the_events_calendarRange<6.4.0.1

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "events-calendar-pro",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "6.4.0.1"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Unknown",
    "product": "The Events Calendar",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "6.4.0.1"
      }
    ],
    "defaultStatus": "unaffected"
  }
]