| Package | Affected versions | Patched versions |
|---|---|---|
| the events calendar | < 6.8.2.1 | 6.8.2.1 |
The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free