The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn't have access to. (e.g. password-protected events, drafts, etc.)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Events Calendar Pro Plugin | — | Update events-calendar-pro plugin to version 6.4.0.1, or a newer patched version | May 15, 2025 | May 24, 2024 |
| The Events Calendar Plugin | — | Update the-events-calendar plugin to version 6.4.0.1, or a newer patched version | May 15, 2025 | May 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub