WordPress The Events Calendar plugin <= 6.11.2.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin The Events Calendar versions = 6.11.2.1...

CVE-2025-48246

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through = 6.11.2.1...

CVE-2025-48246

The Events Calendar WordPress plugin (vulnerable up to 6.11.2.1) suffers a Missing Authorization (broken access control) vulnerability that could allow elevation of privilege due to incorrectly configured access control security levels. CVSS v3.1 base score 5.4 (Medium); exploitation details are ...

CVE-2025-48246 WordPress The Events Calendar <= 6.11.2.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in The Events Calendar The Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Events Calendar: from n/a through 6.11.2.1...