The Events Calendar, 05dcb3501757a6e40b61e256ab88a44c8f6576df

CVE, Research URL: 05dcb3501757a6e40b61e256ab88a44c8f6576df
Home page URL: Security reports for The Events Calendar
Application: The Events Calendar
Published on: Apr 25, 2023
Research Description: The Events Calendar [the-events-calendar] < 4.1.1.1 WordPress The Events Calendar Plugin <= 4.1.1 is vulnerable to Open Redirection Update the plugin. Paul Mynarsky discovered and reported this Open Redirection vulnerability in WordPress The Events Calendar Plugin. This could allow a malicious actor to redirect users from one site to the other due to the redirect URL not being validated. Users could be tricked to visiting a legitimate site to then be redirected to a malicious site and cause a phishing incident. This vulnerability has been fixed in version 4.1.1.1.
Affected versions: max 4.1.1.1.
Status: vulnerable