Description

WordPress Plugin The Events Calendar is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin The Events Calendar version 4.0.4 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 4.0.5 or latest

References

https://wordpress.org/plugins/the-events-calendar/changelog/

Related Vulnerabilities

WordPress Plugin WP Activity Log PHP Object Injection (3.2.5)

WordPress Plugin Ad Swapper Cross-Site Scripting (1.0.3)

WordPress Plugin Contact Form by WD-responsive drag & drop contact form builder tool SQL Injection (1.7.30)

WordPress Plugin Meta Box-WordPress Custom Fields Framework Arbitrary File Upload (4.16.1)

WordPress Plugin WP Business Intelligence Lite SQL Injection (1.6.1)

Severity

High

Tags

Missing Update