Information leakage vulnerability in HT Event – WordPress Event Manager Plugin for Elementor 1.4.7

The HT Event is a plugin for WordPress that helps manage events using Elementor. Unfortunately, the plugin has a security issue that can expose sensitive information. This can be exploited by attackers who have at least Contributor-level access to the site. The vulnerable function is called ‘render’ and is located in a specific file. As a result, private, pending, scheduled, and draft template data can be accessed without proper authorization.