Security
فارسی
All products

the-events-calendar

WordPress · Plugin
43 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
The Events Calendar <= 6.18.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-119370 the-events-calendar WordPress Medium Fix reported
The Events Calendar <= 6.18.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-119369 the-events-calendar WordPress Medium Fix reported
The Events Calendar <= 6.18.2 - Missing AuthorizationCVE-2026-119368 the-events-calendar WordPress Medium Fix reported
The Events Calendar <= 6.18.2 - Missing AuthorizationCVE-2026-119367 the-events-calendar WordPress Medium Fix reported
The Events Calendar <= 6.18.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-110903 the-events-calendar WordPress Medium Fix reported
The Events Calendar <= 6.17.4 - Unauthenticated PHP Object InjectionCVE-2026-95606 the-events-calendar WordPress High Fix reported
The Events Calendar 6.12.0 - 6.17.5 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2026-84740 the-events-calendar WordPress Medium Fix reported
The Events Calendar <= 6.17.5 - Missing AuthorizationCVE-2026-97285 the-events-calendar WordPress Medium Fix reported
The Events Calendar 6.15.16.1 - 6.17.4.1 - Missing AuthorizationCVE-2026-84743 the-events-calendar WordPress Medium Fix reported
The Events Calendar 6.15.0 - 6.17.4.1 - Missing AuthorizationCVE-2026-84742 the-events-calendar WordPress Medium Fix reported
The Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Information ExposureCVE-2026-84741 the-events-calendar WordPress Medium Fix reported
The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable InvocationCVE-2026-78159 the-events-calendar WordPress Critical Fix reported
The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code ExecutionCVE-2026-78006 the-events-calendar WordPress Critical Fix reported
The Events Calendar <= 6.17.2 - Unauthenticated PHP Object InjectionCVE-2026-78265 the-events-calendar WordPress High Fix reported
The Events Calendar < 6.17.3.1 - Authenticated (Contributor+) Information ExposureCVE-2026-84745 the-events-calendar WordPress Medium Fix reported
The Events Calendar <= 6.16.5.0 - Missing AuthorizationCVE-2026-13390 the-events-calendar WordPress Medium Fix reported
The Events Calendar 6.15.12-6.16.2 - Unauthenticated SQL InjectionCVE-2026-49772 the-events-calendar WordPress High Fix reported
The Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_importCVE-2026-3585 the-events-calendar WordPress High Fix reported
The Events Calendar <= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST APICVE-2026-2694 the-events-calendar WordPress Medium Fix reported
The Events Calendar <= 6.15.13 - Missing Authorization to Authenticated (Subscriber+) Data Migration ControlCVE-2025-15043 the-events-calendar WordPress Medium Fix reported