CVE-2026-39532 — WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability

CVE-2026-39532

WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability PUBLISHED

Description (CNA)

Contributor PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 versions.

Vendor / product	Versions
Stiofan / Events Calendar for GeoDirectory	affected n/a through 2.3.25

CWE-502

CISA-ADP

No English description supplied.

No references supplied.