CVE-2025-12408 — Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 7.2.2.3

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
CVE-2025-12408	Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 7.2.2.3	Exposure of Sensitive Information to an Unauthorized Actor	Medium 5.3	< 7.2.2.3	7.2.2.3	2025-12-11	—

CVE-2025-12408

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 7.2.2.2 via the 'get_location' action due to insufficient restrictions on which locations can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft event locations that they should not have access to.

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)