Threats tagged 'ghsa-4xp7-hp3g-mfgm'

A vulnerability in the Event Tickets and Registration WordPress plugin before version 5.30.3.1 allows unauthenticated users to access attendee data for private and non-public events. This occurs because the plugin does not properly restrict access to attendee information based on event visibility permissions.