The Events Calendar PHP Object Injection

The Events Calendar plugin for WordPress is affected by an unauthenticated PHP Object Injection vulnerability in versions up to 6.17.2.

This flaw allows attackers to inject malicious PHP objects, potentially leading to remote code execution.