Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-31572 EUVD-2025-8750GHSA-59pj-2g8h-96c8

WordPress Multi Days Events and Multi Events in One Day Calendar plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Published Mar 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in v20202020 Multi Days Events and Multi Events in One Day Calendar dragon-calendar-free-version allows Cross Site Request Forgery.This issue affects Multi Days Events and Multi Events in One Day Calendar: from n/a through <= 1.1.3.

Affected products

VendorProductAffectedFixed
v20202020 Multi Days Events and Multi Events in One Day Calendar ≤ 1.1.3 —

References