/Vulnerability Library

WordPress Events Calendar 6.8.2.1 - Information Disclosure

CVE-2024-5333
Verified

Description

The Events Calendar WordPress plugin 6.8.2.1 contains missing access checks in the REST API, letting unauthenticated users access information about password protected events, exploit requires no authentication.

Severity

Medium

CVSS Score

5.3

Exploit Probability

1%

Affected Product

the_events_calendar

Published Date

January 23, 2026

Template Author

dhiyaneshdk

CVE-2024-5333.yaml
5.3Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE ID:
cve-2024-5333
CWE ID:
cwe-639

References

https://wpscan.com/vulnerability/764b5a23-8b51-4882-b899-beb54f684984/https://nvd.nist.gov/vuln/detail/CVE-2024-5333

Remediation Steps

Update to version 6.8.2.1 or later.