7.5
High
CVE-2024-8700 The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing…
Description
The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Event Calendar 1.0 | earliest → 1.0.4 | No fix stated |