Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: theeventscalendar Component: Events Calendar Pro Clear all filters
TI-2024-07430 CVE-2024-8016 · GHSA-3x3j-vpj2-43h2

The Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution

Priority MEDIUM 43

The Events Calendar Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.0.2 via deserialization of untrusted input from the 'filters' parameter in widgets.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00741 Published 2024-08-30 No fix listed CWE-502