The Event Espresso 4 Decaf plugin, used for managing event registrations and ticketing on WordPress, has a security vulnerability. This vulnerability allows unauthorized users with certain levels of access to modify the plugin’s settings without proper authorization checks. This vulnerability affects all versions up to and including 5.0.22.decaf.