Plugin icon

WP FullCalendar

wp-fullcalendar

Vulnerabilities:

4

Last Updated:

April 23, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-02-11
Title
FullCalendar <= 1.6 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2026-01-26
Title
FullCalendar <= 1.6 - Unauthenticated Information Exposure
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-01-06
Title
WP FullCalendar < 1.6 - Contributor+ Stored XSS
Fixed in
Fixed in 1.6
CVSS
5.9 (medium)
Published
2023-01-17
Title
WP FullCalendar < 1.5 - Unauthenticated Arbitrary Post Access
Fixed in
Fixed in 1.5
CVSS
7.5 (high)