Extension WordPress
Vulnérabilités Events Calendar for GeoDirectory
Cette page rassemble les failles publiées pour Events Calendar for GeoDirectory, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Events Calendar for GeoDirectory
3 fiches
Events Calendar for GeoDirectory <= 2.3.28 – Authenticated (Subscriber+) Privilege Escalation
The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 2.3.28. This is due to the ajax_ayi_action() handler only applying strip_tags(esc_sql()) , with no allow-list , to the attacker-controlled…
*-2.3.28
2.3.29
08/06/2026
Events Calendar for GeoDirectory <= 2.3.25 – Authenticated (Contributor+) PHP Object Injection
The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3.25 via deserialization of untrusted input. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-2.3.25
2.3.26
16/04/2026
Events Calendar for GeoDirectory <= 2.3.14 – Authenticated (Contributor+) PHP Object Injection
The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3.14 via deserialization of untrusted input. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-2.3.14
2.3.15
23/02/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.