Total-soft Event Calendar vulnerabilities

• total-soft event calendar Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion CVE-2024-8700 7.5 HighMay 15, 2025
• total-soft event calendar, totalsoft event calendar – calendar (wordpress plugin) +1 more WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability CVE-2022-36390 4.1 MediumSeptember 21, 2022
• total-soft event calendar, totalsoft event calendar – calendar (wordpress plugin) +1 more WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability CVE-2022-38067 6.5 MediumSeptember 9, 2022