What is the CVSS score of CVE-2024-5333?

CVE-2024-5333 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 1.1%.

Is there a public PoC exploit available for CVE-2024-5333?

Yes, a public proof-of-concept exploit is available for CVE-2024-5333. Prioritise patching immediately. EPSS: 1.1%.

The Events Calendar CVE-2024-5333

MEDIUM

2024-12-16 contact@wpscan.com

WordPress Information Disclosure The Events Calendar

5.3

CVSS 3.1 · Vendor: wpscan

Severity by source

Vendor (wpscan) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from Vendor (wpscan) · only source for this CVE.

CVSS VectorVendor: wpscan

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Dec 16, 2024 - 06:15 cve.org

MEDIUM 5.3

DescriptionCVE.org

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events.

AnalysisAI

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events. Affected products include: Stellarwp The Events Calendar. Version information: before 6.8.2.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in The Events Calendar

View all

CVE-2024-4180 CRITICAL Act Now POC

9.1 Jun 04

The Events Calendar WordPress plugin before 6.4.0.1 does not properly sanitize user-submitted content when rendering som

CVE-2023-6203 HIGH This Week POC

7.5 Dec 18

The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated

CVE-2024-1295 MEDIUM This Month POC

6.5 Jun 14

The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not pr

CVE-2024-8275 CRITICAL Act Now

9.8 Sep 25

The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tribe_has_

CVE-2026-49772 CRITICAL Act Now

9.3 Jun 16

Blind SQL injection in The Events Calendar WordPress plugin (versions 6.15.12 through 6.16.2) by Liquid Web / StellarWP

CVE-2025-5144 MEDIUM This Month

6.4 Jun 11

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-*’ paramete

CVE-2024-6931 MEDIUM This Month

6.1 Sep 27

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via RSVP name field in all ver

CVE-2019-15109 MEDIUM This Month

6.1 Aug 21

The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter. Rated medium severi

CVE-2023-6557 MEDIUM This Month

5.3 Feb 05

The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and

CVE-2024-8493 MEDIUM Monitor POC

4.8 May 15

The Events Calendar WordPress plugin before 6.6.4 does not sanitise and escape some of its settings, which could allow h

CVE-2024-12118 MEDIUM This Month

6.4 Jan 23

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Wi

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2024-5333 vulnerability details – vuln.today

Back

The Events Calendar CVE-2024-5333

Severity by source

CVSS VectorVendor: wpscan

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in The Events Calendar

Same technique Information Disclosure

Share

External POC / Exploit Code