CVE-2021-25025

MEDIO 4.3CVE-2021-25025 · Published 17/01/2022 · updated 17/06/2026

In breve

CVE-2021-25025 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda eventcalendar (theeventscalendar).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.35%, superiore al 28.4% delle vulnerabilità.
Correzione: aggiornare a 1.1.51 o successiva.

Package	Affected versions	Patched versions
eventcalendar theeventscalendar	`< 1.1.51`	`1.1.51`

Description

The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create events

References

wpscan.com/vulnerability/24fb4eb4-9fe1-4433-8844-8904eaf13c0e · Exploit

Altre vulnerabilità di eventcalendar

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free