Stellarwp The Events Calendar vulnerabilities
- stellarwp the events calendarThe Events Calendar <= 6.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- stellarwp the events calendarThe Events Calendar < 6.6.4 - Admin+ Stored XSS4.8 Medium
- stellarwp the events calendarThe Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure5.3 Medium
- stellarwp the events calendarThe Events Calendar <= 6.6.3 - Unauthenticated Stored Cross-Site Scripting7.2 High
- stellarwp the events calendarThe Events Calendar <= 6.6.4 - Unauthenticated SQL Injection9.8 Critical
- stellarwp the events calendarThe Events Calendar < 6.4.0.1 - Reflected XSS9.1 Critical
- stellarwp the events calendarThe Events Calendar <= 6.2.8.2 - Unauthenticated Sensitive Information Exposure5.3 Medium
- stellarwp the events calendarThe Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read7.5 High
- stellarwp the events calendarThe the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.6.1 Medium