Medium · 6.5 CVE-2024-38716 EUVD-2024-37567GHSA-rqmr-h6xr-8h7j

WordPress Events Calendar for Google plugin <= 2.1.0 - Local File Inclusion vulnerability

Published Jul 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Blue Plugins Product: Events Calendar for Google

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Blue Plugins Events Calendar for Google allows PHP Local File Inclusion.This issue affects Events Calendar for Google: from n/a through 2.1.0.

Affected products

Vendor	Product	Affected	Fixed
Blue Plugins	Events Calendar for Google	≤ 2.1.0	—

References

https://patchstack.com/database/vulnerability/events-calendar-for-google/wordpress-events-calendar-for-google-plugin-2-1-0-local-file-inclusion-vulnerability?_s_id=cve vdb-entry