CVE-2026-39532 Contributor PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 versions

Description

Contributor PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 versions.

Affected products and versions

Product	Affected versions	Fixed in
Events Calendar for GeoDirectory 2.3	earliest → 2.3.25	No fix stated

Other CVEs of Events Calendar for GeoDirectory

The 2 CVEs of Events Calendar for GeoDirectory →

CVE-2025-26967 Deserialization of Untrusted Data vulnerability in Stiofan Events Calendar for GeoDirectory events-for-geodirectory… 8.8 High