CVE-2024-1295

CVE-2024-1295 affects The Events Calendar and The Events Calendar Pro WordPress plugins prior to version 6.4.0.1. The vulnerability allows users with at least the Contributor role to leak details of events they should not access (e.g., password-protected events, drafts). ROOT CAUSE and IMPACT are...