CVE Database /
CVE-2024-37518
CVE · Medium
CVE-2024-37518 — The Events Calendar [the-events-calendar] < 6.5.1.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-37518
|
The Events Calendar [the-events-calendar] < 6.5.1.5 |
Cross-Site Request Forgery (CSRF) |
Medium
4.3
|
< 6.5.1.5
|
6.5.1.5 |
2024-07-05 |
—
|
CVE-2024-37518
The Events Calendar plugin for WordPress up to version 6.5.1.4 contains a cross-site request forgery vulnerability in the action_restore_events() function that lacks proper nonce verification. An unauthenticated attacker can exploit this flaw to restore events if they successfully deceive an administrator into clicking a malicious link. The vulnerability was fixed in version 6.5.1.5.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings