Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-8700

Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Total-soft
Products
Event Calendar
CVE-2022-38067

WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Total-soft
Products
Event Calendar
CVE-2022-36390

WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Total-soft
Products
Event Calendar