CVE-2025-3419
The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the proxy_image() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
Vendor
Product
CWE
Yayın Tarihi
2025-05-08 06:15:32
Güncelleme
2025-06-04 22:42:06
Source Identifier
security@wordfence.com
KEV Date Added
-