title: The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read
description: The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated users via a crafted request
problem types: CWE-287 Improper Authentication
affected:
{
vendor: Unknown
product: The Events Calendar
versions:
status: affected, versionType: semver, version: 0, lessThan: 6.2.8.1
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}