Theeventscalendar vulnerabilities
We track 2 vulnerabilities in Theeventscalendar products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2024.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Theeventscalendar vulnerabilities
- 9.8 Critical severity
The Events Calendar: Improper Neutralization of Special Elements used in an SQL Command
The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tribe_has_next_event' function in all versions up to, and including, 6.6.4 due to insufficient escaping on the user supplied parameter and lack of suf
- 7.2 High severity
The Events Calendar Pro: Deserialization of Untrusted Data
The Events Calendar Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.0.2 via deserialization of untrusted input from the 'filters' parameter in widgets. This makes it possible for authenticated attackers, w