Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-48246 EUVD-2025-28166GHSA-qcf6-9r7h-r3r4

WordPress The Events Calendar plugin <= 6.11.2.1 - Broken Access Control Vulnerability

Published May 19, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through <= 6.11.2.1.

Affected products

VendorProductAffectedFixed
StellarWP The Events Calendar ≤ 6.11.2.1 —

References