TI-2025-11736 CVE-2025-12813 · GHSA-8h9p-5fxf-7jmx
Holiday class post calendar <= 7.1 - Unauthenticated Remote Code Execution via 'contents'
Priority MEDIUM 51
The Holiday class post calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.1 via the 'contents' parameter.