CVE-2023-6203: falha em The Events Calendar
The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.8%
The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated users via a crafted request
Produtos afetados
Unknown · The Events CalendarCVEs relacionadas — The Events Calendar
No mesmo produto, das mais perigosas para as menos.
CVE-2024-4180CRITICALThe Events Calendar < 6.4.0.1 - Reflected XSSEPSS 2.1%CVE-2024-5333MEDIUMThe Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event DisclosureEPSS 1.1%CVE-2024-1295MEDIUMThe Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events AccessEPSS 0.5%CVE-2024-8493MEDIUMThe Events Calendar < 6.6.4 - Admin+ Stored XSSEPSS 0.4%CVE-2026-84741MEDIUMThe Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Non-Public Venue and Organizer Disclosure via REST APIEPSS 0.3%CVE-2026-84743LOWThe Events Calendar 6.15.16.1 - 6.17.4.1 - Contributor+ Event/Venue/Organizer Update, Trash and Ownership Takeover via by-slug REST RoutesEPSS 0.3%