CVE-2024-5333

PoC —

CVSS 3.1

5.3 medium

EPSS

1%p64

Published

Dec 16, 2024 (Dec 16, 2024)

Modified

Jun 17, 2026

Description

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events.

Vendors: stellarwp
Products: the events calendar
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.