Plugin icon

Calendar

calendar

Vulnerabilities:

5

Last Updated:

May 16, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2025-12-22
Title
Calendar < 1.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'event_desc'
Fixed in
Fixed in 1.3.17
CVSS
6.4 (medium)
Published
2024-04-29
Title
Calendar < 1.3.15 - Contributor+ SQLi via Shortcode
Fixed in
Fixed in 1.3.15
CVSS
7.2 (high)
Published
2018-10-30
Title
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.3.11
CVSS
5.4 (medium)
Published
2016-11-08
Title
Calendar <= 1.3.7 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.3.8
CVSS
n/a
Published
2014-08-01
Title
Calendar <= 1.3.2 - Entry Addition Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 1.3.3
CVSS
n/a