CVE-2024-1295

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p39

Published

Jun 14, 2024 (Jun 14, 2024)

Modified

Jun 17, 2026

Description

The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn't have access to. (e.g. password-protected events, drafts, etc.)

Vendors: tri
Products: the events calendar
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.