Cross-Site Request Forgery Vulnerability in Georg Sexton WordPress Events Calendar Plugin

CVE-2025-32597

What is CVE-2025-32597?

A Cross-Site Request Forgery vulnerability has been identified in the George Sexton WordPress Events Calendar Plugin – connectDaily. This security issue could allow attackers to execute unauthorized actions on behalf of users, potentially leading to Cross-Site Scripting (XSS) attacks. The vulnerability impacts versions from n/a up to 1.4.8 of the plugin, compromising the security of WordPress sites that utilize this event management tool. It is essential for users to review their plugin versions and take necessary action to secure their installations.

References