CVE Database /
CVE-2023-35777
CVE · Medium
CVE-2023-35777 — The Events Calendar [the-events-calendar] < 6.1.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-35777
|
The Events Calendar [the-events-calendar] < 6.1.3 |
Missing Authorization |
Medium
5.3
|
< 6.1.3
|
6.1.3 |
2023-07-25 |
—
|
CVE-2023-35777
The Events Calendar plugin before version 6.1.3 contains a vulnerability where the get_ical_output_for_an_event() function lacks proper permission verification. Unauthenticated users can exploit this flaw to access and view private event information that should be restricted. This affects all versions up to and including 6.1.2.2.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings