CVE-2025-24537

The Events Calendar plugin for WordPress contains a security flaw in versions up to 6.7.0, which allows unauthorized individuals to manipulate the system by exploiting a missing validation check within an unspecified function. This can be achieved through social engineering tactics, where an attacker convinces an administrator to click on a malicious link, thereby executing unintended actions. The consequences of this vulnerability are currently unclear.

Based on public CVE data (MITRE/NVD).