Input validation vulnerability in The Events Calendar Pro 7.0.2

A plugin called “Events Calendar Pro” for the website platform WordPress has a security vulnerability that allows attackers to inject harmful code and potentially execute it from a remote location. This flaw affects all versions up to 7.0.2 and can be exploited by users with administrator-level access or higher. Even lower level users may be able to exploit this vulnerability if the plugin is installed with a page builder called Elementor.

Detected in:

The Events Calendar Pro fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.