Threats tagged 'ghsa-hrm4-gfg8-pgx8'

A vulnerability in the Event Tickets and Registration WordPress plugin before version 5.30.3.1 allows unauthenticated users to retrieve the names of attendees for events that do not display a public attendee list. This occurs because the plugin does not properly verify whether an event's attendee list is public before returning attendee information via the REST API.