The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| The_events_calendar | Stellarwp | * | 6.8.2.1 (excluding) |