high7.5
CVE-2024-8700
The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calend…
Impact
The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Total-Soft | Event Calendar | through 1.0.4 |