CVE-2023-35777

Summary

CVE-2023-35777 is a critical vulnerability affecting The Events Calendar plugin. The issue stems from missing authorization checks, permitting unauthorized access. The Events Calendar, which is used from version n/a through 6.1.2.2, is susceptible to exploitation due to incorrectly configured access control security levels. Attackers can potentially manipulate calendar events or gain administrative control, posing a threat to websites running the vulnerable plugin. It is essential to apply the necessary security patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.