CVE-2025-26967

Deserialization of Untrusted Data vulnerability in Stiofan Events Calendar for GeoDirectory events-for-geodirectory allows Object Injection.This issue affects Events Calendar for GeoDirectory: from n/a through = 2.3.14...

CVE-2025-26967

creationtimestamp| type| source ---|---|--- 2025-03-03 14:30:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6216 2025-03-03 15:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285750415310 2026-04-01 21:28:56+00:00| seen|...

CVE-2025-26967

Deserialization of Untrusted Data vulnerability in Stiofan Events Calendar for GeoDirectory events-for-geodirectory allows Object Injection.This issue affects Events Calendar for GeoDirectory: from n/a through = 2.3.14...

CVE-2025-26967

CVE-2025-26967 is a PHP deserialization (Object Injection) vulnerability in the WordPress plugin “Events Calendar for GeoDirectory”, affecting versions up to 2.3.14. The issue arises from deserialization of untrusted data, enabling object injection. CVSS 3.1/3.1 vectors in the reports indicate hi...