Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-25025

Event Calendar < 1.1.51 - Subscriber+ Event Creation

The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create events

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Theeventscalendar
Products
Eventcalendar
CVE-2021-25024

Event Calendar < 1.1.51 - Reflected Cross-Site Scripting

The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Theeventscalendar
Products
Eventcalendar