cbcvebase.

Strix-Bubol5 Holiday Class Post Calendar vulnerabilities

1 known vulnerability affecting strix-bubol5/holiday_class_post_calendar.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-12813P2CRITICALCVSS 9.8≤ 7.12025-11-11
CVE-2025-12813 [CRITICAL] CWE-94 CVE-2025-12813: The Holiday class post calendar plugin for WordPress is vulnerable to Remote Code Execution in all v The Holiday class post calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.1 via the 'contents' parameter. This is due to a lack of sanitization of user-supplied data when creating a cache file. This makes it possible for unauthenticated attackers to execute code on the server.
nvd
Strix-Bubol5 Holiday Class Post Calendar vulnerabilities | cvebase