Joedolson vulnerabilities

Products

• My Calendar – Accessible Event Manager 7
• My Calendar 3

Newest

• joedolson my calendar - accessible event manager My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter CVE-2026-119714 6.9 MediumOctober 30, 2026
• joedolson my calendar – accessible event manager My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute CVE-2026-104798 9.8 CriticalOctober 16, 2026
• joedolson my calendar – accessible event manager My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes CVE-2026-77187 6.4 MediumSeptember 9, 2026
• joedolson my calendar – accessible event manager My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fallback' Shortcode Attribute CVE-2026-77186 6.4 MediumSeptember 9, 2026
• joedolson my calendar – accessible event manager My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters CVE-2026-6854 7.5 HighJuly 8, 2026
• joedolson my calendar – accessible event manager My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter CVE-2026-11896 5.3 MediumJuly 2, 2026
• joedolson my calendar – accessible event manager My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter CVE-2026-7525 4.3 MediumMay 14, 2026
• joedolson my-calendar My Calendar: Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog CVE-2026-40308 Fix available 8.8 HighApril 16, 2026
• joedolson my calendar – accessible event manager My Calendar – Accessible Event Manager <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-2355 6.4 MediumMarch 4, 2026
• joedolson wp accessibility WP Accessibility <= 2.3.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'alt' Attribute CVE-2026-2362 6.4 MediumFebruary 27, 2026
• joedolson able player, accessible html5 media player Able Player, accessible HTML5 media player <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via preload Parameter CVE-2025-3752 6.4 MediumApril 25, 2025
• joedolson my tickets – accessible event ticketing My Tickets – Accessible Event Ticketing <= 2.0.16 - Authenticated (Subscriber+) Privilege Escalation CVE-2025-3761 8.8 HighApril 24, 2025
• joe dolson my calendar My Calendar < 3.4.24 - Authenticated Stored XSS CVE-2024-1274 5.4 MediumApril 2, 2024
• joedolson my calendar The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL... CVE-2023-6360 Public exploit EPSS 63.1% 8.6 HighNovember 30, 2023
• joedolson my content management WordPress My Content Management Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-34377 5.9 MediumAugust 5, 2023
• joedolson my calendar, wordpress +1 more Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress... CVE-2012-6527 2.6 LowJanuary 31, 2013