Threats tagged 'ghsa-5pgh-gr97-8f3m'

A missing authorization vulnerability exists in Liquid Web / StellarWP The Events Calendar plugin (the-events-calendar) affecting versions up to 6.18.2. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized information disclosure or modification. The vulnerability has a medium severity rating with a CVSS score of 5.4.