Skip to main content

Events Calendar Pro

1 CVEs product

Monthly

CVE-2024-8016 Aug 30, 07:15 HIGH This Week

The Events Calendar Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.0.2 via deserialization of untrusted input from the 'filters' parameter in. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Deserialization Events Calendar Pro Theeventscalendar
NVD
CVSS 3.1
7.2
EPSS
0.7%
EPSS 1% CVSS 7.2
HIGH This Week

The Events Calendar Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.0.2 via deserialization of untrusted input from the 'filters' parameter in. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Deserialization +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy