CVE-2024-6931

概要

参考情報

• plugins.trac.wordpress.org/changeset/3150170 · Patch
• wordpress.org/plugins/the-events-calendar · Release Notes
• wordfence.com/threat-intel/vulnerabilities/id/a5f847d8-323f-47f9-ba10-df8173ff3018 · Third Party Advisory

the events calendar のその他の脆弱性

• CVE-2025-5144中 5.4The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-*’ parameters in all versions u…
• CVE-2024-8493中 4.8The Events Calendar WordPress plugin before 6.6.4 does not sanitise and escape some of its settings, which could allow high privilege users …
• CVE-2024-5333中 5.3The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access i…
• CVE-2024-8275緊急 9.8The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tribe_has_next_event' function…
• CVE-2024-4180緊急 9.1The Events Calendar WordPress plugin before 6.4.0.1 does not properly sanitize user-submitted content when rendering some views via AJAX.