Skip to contentUnknown Calendar vulnerabilities
- stellarwp the events calendarThe Events Calendar < 6.4.0.1 - Reflected XSSCVE-2024-41809.1 Critical
- mf gig calendar project gig calendar, unknown mf gig calendar +1 moreMF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRFCVE-2024-3756Fix available7.5 High
- mf gig calendar project gig calendar, unknown mf gig calendar +1 moreMF Gig Calendar <= 1.2.1 - Editor+ Stored XSSCVE-2024-3755Fix available5.4 Medium
- matthew fries mf gig calendar, mf gig calendar project gig calendar +1 moreWordPress MF Gig Calendar plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-336515.4 Medium
- joe dolson my calendarMy Calendar < 3.4.24 - Authenticated Stored XSSCVE-2024-12745.4 Medium
- codepeople appointment booking calendarBooking Calendar < 1.3.83 - CSRF appointment schedulingCVE-2024-08568.8 High
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreSpiffy Calendar < 4.9.9 - Broken Access ControlCVE-2024-08555.3 Medium
- matthew fries mf gig calendar, mf gig calendar project gig calendar +1 moreWordPress MF Gig Calendar Plugin <= 1.2.1 is vulnerable to SQL InjectionCVE-2023-508428.5 High
- stellarwp the events calendarThe Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post ReadCVE-2023-62037.5 High
- unknown booking calendarBooking Calendar < 9.7.3.1 - Unauthenticated Stored XSSCVE-2023-46206.1 Medium
- matthew fries mf gig calendar, mf gig calendar project gig calendar +1 moreWordPress MF Gig Calendar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-379706.5 Medium
- editorial calendar project calendar, marketing fire editorial calendar +1 moreEditorial Calendar < 3.8.3 - Contributor+ Stored XSSCVE-2022-41155.4 Medium
- unknown modern events calendar liteModern Events Calendar lite < 6.5.2 - Admin+ Stored XSSCVE-2023-14004.8 Medium
- marcus (aka @msykes) wp fullcalendarWP FullCalendar < 1.5 - Unauthenticated Arbitrary Post AccessCVE-2022-38915.3 Medium
- mhsoftware wordpress events calendar pluginWordPress Events Calendar Plugin < 1.4.5 - Multiple Reflected XSSCVE-2022-43206.1 Medium
- unknown booking calendar, appointment booking system, wpdevart booking calendar +1 moreBooking Calendar < 3.2.2 - Unauthenticated Arbitrary File UploadCVE-2022-39829.8 Critical
- dwbooster calendar event multi viewCalendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSSCVE-2022-2846Public exploit4.3 Medium
- innate-images-llc vr calendar, vr calendar project calendar +1 moreVR Calendar < 2.3.2 - Unauthenticated Arbitrary Function CallCVE-2022-2314EPSS 17.2%9.8 Critical
- wp-eventmanager wp event manager, unknown wp event manager – easily build your calendar of events! +1 moreWP Event Manager < 3.1.28 - Reflected Cross-Site ScriptingCVE-2022-14746.1 Medium
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.7.1 - Reflected Cross-Site ScriptingCVE-2022-10076.1 Medium
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.7.1 - Admin+ SQLiCVE-2022-10067.2 High
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.49 - Customer+ Arbitrary Appointments Status UpdateCVE-2022-08255.4 Medium
- saasproject booking package, unknown booking package – appointment booking calendar system +1 moreBooking Package < 1.5.29 - Unauthenticated Sensitive Data DisclosureCVE-2022-07097.5 High
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data DisclosureCVE-2022-07205.4 Medium
- reputeinfosystems bookingpress, unknown bookingpress – appointments booking calendar plugin and online scheduling plugin +1 moreBookingPress < 1.0.11 - Unauthenticated SQL InjectionCVE-2022-0739Public exploitEPSS 37.4%9.8 Critical
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.7.0 - Unauthenticated SQL InjectionCVE-2022-06949.8 Critical
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.46 - Manager+ RCECVE-2022-06878.8 High
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.46 - Reflected Cross-Site ScriptingCVE-2022-06276.1 Medium
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.46 - Arbitrary Customer Deletion via CSRFCVE-2022-06164.3 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site ScriptingCVE-2022-0364EPSS 69.6%5.4 Medium
- wp-eventmanager wp event manager, unknown wp event manager – easily build your calendar of events! +1 moreWP Event Manager < 3.1.23 - Admin+ Stored Cross-Site ScriptingCVE-2021-248104.8 Medium
- 10web spidercalendarSpiderCalendar <= 1.5.65 - Reflected Cross-Site ScriptingCVE-2022-02126.1 Medium
- roundupwp registrations for the events calendar, unknown registrations for the events calendar – event registration plugin +1 moreRegistrations for the Events Calendar < 2.7.10 - Reflected Cross-Site ScriptingCVE-2021-250836.1 Medium
- unknown wp booking system – booking calendar, wpbookingsystem wp booking system +1 moreWP Booking System – Booking Calendar < 2.0.15 - Authenticated Reflected Cross-Site Scripting (XSS)CVE-2021-250615.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSSCVE-2021-250465.4 Medium
- theeventscalendar eventcalendarEvent Calendar < 1.1.51 - Reflected Cross-Site ScriptingCVE-2021-250246.1 Medium
- theeventscalendar eventcalendarEvent Calendar < 1.1.51 - Subscriber+ Event CreationCVE-2021-250254.3 Medium
- booking calendar project calendar, unknown booking calendar +1 moreBooking Calendar < 8.9.2 - Reflected Cross-Site ScriptingCVE-2021-250406.1 Medium
- unknown modern events calendar liteModern Events Calendar < 6.1.5 - Unauthenticated Blind SQL InjectionCVE-2021-24946Public exploitEPSS 72.8%9.8 Critical
- unknown modern events calendar liteModern Events Calendar Lite < 6.1.5 - Reflected Cross-Site ScriptingCVE-2021-249256.1 Medium
- roundupwp registrations for the events calendar, unknown registrations for the events calendar – event registration plugin +1 moreRegistrations for the Events Calendar < 2.7.6 - Unauthenticated SQL InjectionCVE-2021-249439.8 Critical
- joe dolson my calendar, my calendar project calendar +1 moreMy Calendar < 3.2.18 - Subscriber+ Reflected Cross-Site ScriptingCVE-2021-249275.4 Medium
- roundupwp registrations for the events calendar, unknown registrations for the events calendar – event registration plugin +1 moreRegistrations for The Events Calendar < 2.7.5 - Reflected Cross-Site ScriptingCVE-2021-248766.1 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site ScriptingCVE-2021-247165.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site ScriptingCVE-2021-246874.8 Medium
- offshorewebmaster availability calendarAvailability Calendar < 1.2.1 - Authenticated SQL InjectionCVE-2021-246068.8 High
- offshorewebmaster availability calendarAvailability Calendar < 1.2.2 - Authenticated Stored Cross-Site ScriptingCVE-2021-246044.8 Medium
- roland murg wp simple booking calendarWP Simple Booking Calendar <= 2.0.6 (before 07/12/2021) - Authenticated SQL InjectionCVE-2021-247268.8 High
- mf gig calendar project gig calendar, unknown mf gig calendar +1 moreMF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS)CVE-2021-245106.1 Medium
- unknown diary & availability calendar, roosty diary-availability-calendar +1 moreDiary & Availability Calendar <= 1.0.3 - Authenticated (subscriber+) SQL InjectionCVE-2021-245558.8 High
- Show moreLoading…