Lucene search
Krzysztof ZającPATCHSTACK:E13428E8EA76B947566FE8069D9A0D72HistoryDec 15, 2021 - 12:00 a.m.
WordPress Event Calendar WD plugin <= 1.1.50 - Cross-Site Request Forgery (CSRF) vulnerability
2021-12-1500:00:00
Krzysztof Zając
patchstack.com
6
wordpress
event calendar wd
cross-site request forgery
csrf
vulnerability
krzysztof zając
update
EPSS
0.001
Percentile
21.2%
Cross-Site Request Forgery (CSRF) vulnerability discovered by Krzysztof Zając in WordPress Event Calendar WD plugin (versions <= 1.1.50).
Solution
Update the WordPress Event Calendar WD plugin to the latest available version (at least 1.1.51).
Related
wpvulndb
wpvulndb
Event Calendar < 1.1.51 - Subscriber+ Event Creation
2021-12-20 00:00:00
cvelist
cvelist
CVE-2021-25025 Event Calendar < 1.1.51 - Subscriber+ Event Creation
2022-01-17 00:00:00
nvd
nvd
CVE-2021-25025
2022-01-17 13:15:07
prion
prion
Cross site request forgery (csrf)
2022-01-17 13:15:00
wpexploit
wpexploit
Event Calendar < 1.1.51 - Subscriber+ Event Creation
2021-12-20 00:00:00
cve
cve
CVE-2021-25025
2022-01-17 13:15:07