CVE-2024-1319 — Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure
The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of st…
Published: 2024-03-04 · CVSS: 4.3 · CVSS 3.1
The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7