CVE-2024-1295

The Events Calendar plugin before version 6.4.0.1 contains inadequate permission validation in a function, allowing authenticated users with Contributor-level permissions or higher to view event data they should not be able to access. An attacker with minimal account privileges could exploit this weakness to retrieve sensitive information about events they lack authorization to see.

Based on public CVE data (MITRE/NVD).