Skip to content
OpenAdvisories

Vendor

setriosoft

3 known vulnerabilities.

Products

bizcalendar-web 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-7650

    BizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion

    The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.0.53 via the 'bizcalv' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include …

    setriosoft bizcalendar-web Web / CMS
  • High 7.6
    CVE-2025-30843

    WordPress bizcalendar-web plugin <= 1.1.0.34 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in setriosoft bizcalendar-web bizcalendar-web allows SQL Injection.This issue affects bizcalendar-web: from n/a through <= 1.1.0.34.

    setriosoft bizcalendar-web