The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure
28Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 5.3epss 1.1%
probabilidad de explotación
1.1%top 38% de las CVE
explotación observada
noninguna fuente lo reporta
The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Productos afectados
Unknown · The Events Calendar