CVE-2024-4180

概要

参考情報

• wpscan.com/vulnerability/b2a92316-e404-4a5e-8426-f88df6e87550 · Exploit

the events calendar のその他の脆弱性

• CVE-2025-5144中 5.4The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-*’ parameters in all versions u…
• CVE-2024-8493中 4.8The Events Calendar WordPress plugin before 6.6.4 does not sanitise and escape some of its settings, which could allow high privilege users …
• CVE-2024-5333中 5.3The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access i…
• CVE-2024-6931中 6.1The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via RSVP name field in all versions up to, and inc…
• CVE-2024-8275緊急 9.8The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tribe_has_next_event' function…