Threats tagged 'ghsa-fgmm-c43r-4vvc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2025-12175The The Events Calendar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on Medium4.32025-10-31GCVE DatabaseCVE-2025-12175 The Events Calendar plugin for WordPress has a vulnerability in all versions up to and including 6.15.9 where a missing capability check on the 'tec_qr_code_modal' AJAX endpoint allows authenticated users with Subscriber-level access or higher to view draft event names and generate or view QR codes for those drafts. Report on CVE-2025-12175 Vulnerability CWE-862 #ghsa-fgmm-c43r-4vvc	GCVE Database	2025-10-31

Page 1 of 1