Vulnerability — CVE-2024-1295

CVE-2024-1295

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-1295
Description:: The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn't have access to. (e.g. password-protected events, drafts, etc.)
Last updated date:: 08/07/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 08/07/2024
Reference url to background: https://wpscan.com/vulnerability/3cffbeb0-545a-4002-b02c-0fa38cada1db/