Description The plugin discloses the content of password protected posts to unauthenticated users via a crafted request
Append "?view=single-event" to a password protected post, then view the source of the page and find the post content disclosed in <script type="application/ld+json">
Example: https://exmple.com/password-protected-post/?view=single-event