CVE-2025-24537

Summary

CVE-2025-24537 denotes a Cross-Site Request Forgery (CSRF) vulnerability in The Events Calendar plugin. This weakness enables an attacker to manipulate a user's session unknowingly, potentially leading to unintended actions, such as data modification or unauthorized access. The Events Calendar, versions from n/a up to 6.7.0, have been identified as being affected by this issue. It is crucial for users to update to the latest version or apply appropriate security measures to secure their WordPress installations against CSRF attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.