Description

WordPress Plugin Events Shortcodes For The Events Calendar is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Events Shortcodes For The Events Calendar version 1.7.2 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.8 or latest

References

https://plugins.svn.wordpress.org/template-events-calendar/trunk/readme.txt

Related Vulnerabilities

WordPress Ultimate Member Plugin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-3361)

WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Unspecified Vulnerability (5.1)

MongoDb Externally Controlled Reference to a Resource in Another Sphere Vulnerability (CVE-2024-8207)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-28979)

WordPress Plugin Spotlight Social Feeds [Block, Shortcode, and Widget] Cross-Site Scripting (1.4.2)

Severity

High

Tags

Missing Update