Description
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.
References
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.