cleantalk
Vulnerabilities and Security Researches

The Events Calendar, CVE-2025-24537

CVE, Research URL

CVE-2025-24537

Home page URL

Security reports for The Events Calendar

Application

The Events Calendar

Published on
Jan 27, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in The Events Calendar The Events Calendar allows Cross Site Request Forgery. This issue affects The Events Calendar: from n/a through 6.7.0.
Affected versions
max 6.7.1.
Status
vulnerable
Previous vulnerability researches
Add infos to the events calendar (CVE-2024-11875) , Dec 13, 2024
Events Search For The Events Calendar (064f04a5db00947ea83e3596cf05df5e81a0431e) , Jun 07, 2024
The Events Calendar Countdown Addon (CVE-2025-69348) , Jan 10, 2026
The Events Calendar Countdown Addon (CVE-2025-49311) , Jun 15, 2025
The Events Calendar Countdown Addon (72efd54c37bb1879f4e964b54e1d1d309c51e9dd) , Jun 06, 2024
New vulnerability
Security & Malware scan by CleanTalk , Apr 03, 2026
OOPSpam Anti-Spam (CVE-2026-32544) , Mar 31, 2026
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor (CVE-2026-27042) , Mar 31, 2026
The Conference (CVE-2026-32335) , Mar 31, 2026
WP Booking System – Booking Calendar (CVE-2025-68515) , Mar 31, 2026