5.3
Medium
CVE-2023-35777 Missing Authorization vulnerability in The Events Calendar The Events Calendar allows Exploiting Incorrectly…
Description
Missing Authorization vulnerability in The Events Calendar The Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.1.2.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| The Events Calendar 6.1 | earliest → 6.1.2.2 | No fix stated |
Other CVEs of The Events Calendar
The 5 CVEs of The Events Calendar →
CVE-2025-48246
Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly…
5.4
Medium
CVE-2025-24537
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site…
5.4
Medium
CVE-2024-37518
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site…
4.3
Medium
CVE-2024-31433
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP The Events Calendar the-events-calendar.This issue…
4.3
Medium