Access violation vulnerability in Registrations for the Events Calendar – Event Registration Plugin 2.12.1

The Events Calendar plugin for WordPress has a security issue where people can change information without permission. This happens because there is no check to make sure only certain people have access to the rtec_process_form_submission() and rtec_records_edit() functions. This means that if someone has contributor-level access or higher, they can edit and register for events that they shouldn’t be able to.