EIP-2026-113724
PRE-CVEWordPress Plugin Event Easy Calendar - Multiple Cross-Site Request Forgery Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113724. PoCs published by anonymous.
AI-analyzed exploit summary The provided code demonstrates multiple CSRF vulnerabilities in the Event Easy Calendar WordPress plugin (v1.0.0). It includes functional HTML forms that exploit these vulnerabilities to perform unauthorized actions such as adding/updating customers, creating bookings, and modifying settings.
Description
WordPress Plugin Event Easy Calendar - Multiple Cross-Site Request Forgery Vulnerabilities
Exploits (1)
The provided code demonstrates multiple CSRF vulnerabilities in the Event Easy Calendar WordPress plugin (v1.0.0). It includes functional HTML forms that exploit these vulnerabilities to perform unauthorized actions such as adding/updating customers, creating bookings, and modifying settings.