CVE-2025-12175 | Events Calendar Plugin up to 6.15.9 on WordPress Draft Event tec_qr_code_modal authorization

A vulnerability classified as problematic was found in Events Calendar Plugin up to 6.15.9 on WordPress. This affects the function tec_qr_code_modal of the component Draft Event Handler. The manipulation results in missing authorization.

This vulnerability is known as CVE-2025-12175. It is possible to launch the attack remotely. No exploit is available.