What’s Vulnerable › Products

Totalsoft Event Calendar – Calendar (WordPress plugin) vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Totalsoft Event Calendar – Calendar (WordPress plugin) version is affected

Latest Totalsoft Event Calendar – Calendar (WordPress plugin) vulnerabilities

• CVE-2024-8700 — Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion (CVSS 7.5)
• CVE-2022-36390 — WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2022-38067 — WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability (CVSS 5.3)