Cross-Site Request Forgery Vulnerability in Georg Sexton WordPress Events Calendar Plugin

CVE-2025-32597

What is CVE-2025-32597?

A Cross-Site Request Forgery vulnerability has been identified in the George Sexton WordPress Events Calendar Plugin – connectDaily. This security issue could allow attackers to execute unauthorized actions on behalf of users, potentially leading to Cross-Site Scripting (XSS) attacks. The vulnerability impacts versions from n/a up to 1.4.8 of the plugin, compromising the security of WordPress sites that utilize this event management tool. It is essential for users to review their plugin versions and take necessary action to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References