CVE-2025-26967: Wpgeodirectory Events Calendar*

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in Stiofan Events Calendar for GeoDirectory events-for-geodirectory allows Object Injection.This issue affects Events Calendar for GeoDirectory: from n/a through <= 2.3.14.

Affected products

• Wpgeodirectory Events Calendar*: before 2.3.15 (fixed in 2.3.15)

Published 2025-03-03. Last modified 2026-06-17.