| Package | Affected versions | Patched versions |
|---|---|---|
| eventcalendar | < 1.1.51 | 1.1.51 |
The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create events
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free