| Package | Affected versions | Patched versions |
|---|---|---|
| event tickets | < 5.8.1< 5.9.1 | 5.8.15.9.1 |
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free