WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
calendar
Published
2018-10-30
Title
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
calendar
Published
2024-04-29
Title
Calendar < 1.3.15 - Contributor+ SQLi via Shortcode
Slug
calendar-booking
Published
2024-01-30
Title
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
calendar-booking
Published
2024-06-17
Title
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Missing Authorization to Unauthenticated Service Disconnection
Slug
calendar-event
Published
2022-08-25
Title
Event Calendar < 1.4.7 - Unauthenticated Arbitrary Event Deletion
Slug
calendar-event
Published
2022-08-25
Title
Event Calendar < 1.4.7 - Reflected Cross-Site Scripting
Slug
calendar-plugin
Published
2021-08-13
Title
Calendar_plugin <= 1.0 - Reflected Cross-Site Scripting
Slug
calendar-plus
Published
2025-09-12
Title
Calendar Plus <= 1.2.4 - Reflected Cross-Site Scripting
Slug
calendarista
Published
2024-03-26
Title
Calendarista < 15.5.9 - Authenticated (Subscriber+) SQL Injection
Slug
calendarista-basic-edition
Published
2024-03-15
Title
Calendarista Basic Edition < 3.0.3 - Unauthenticated Cross-Site Scripting
Slug
calendarista-basic-edition
Published
2024-03-29
Title
Calendarista Basic Edition < 3.0.6 - Missing Authorization
Slug
calendarista-basic-edition
Published
2024-04-10
Title
Calendarista Basic Edition < 3.0.3 - Cross-Site Request Forgery
Slug
calendi
Published
2025-01-16
Title
Calendi <= 1.1.1 - Reflected Cross-Site Scripting
Slug
call-me-now
Published
2025-01-16
Title
Call me Now <= 1.0.5 - Cross-Site Request Forgery
Slug
call-now-button
Published
2022-04-25
Title
Call Now Button < 1.1.2 - Reflected Cross-Site Scripting
Slug
call-now-button
Published
2024-04-05
Title
Call Now Button < 1.4.7 - Admin+ Stored XSS
Slug
call-now-button
Published
2025-01-24
Title
Call Now Button < 1.4.14 - Cross-Site Request Forgery
Slug
call-now-button
Published
2025-10-29
Title
Call Now Button < 1.5.5 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
Slug
call-now-button
Published
2025-10-28
Title
Call Now Button < 1.5.4 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update
Slug
call-now-coccoc-pht-blog
Published
2025-04-24
Title
Call Now PHT Blog <= 2.4.1 - Cross-Site Request Forgery
Slug
call-now-icon-animate
Published
2023-05-30
Title
Call Now Icon Animate <= 0.1.0 - Admin+ Stored XSS
Slug
call-to-action-popup
Published
2025-01-16
Title
Call To Action <= 1.0.2 - Reflected Cross-Site Scripting
Slug
callback-request
Published
2025-02-02
Title
Callback Request <= 1.4 - Reflected Cross-Site Scripting
Slug
callbook-mobile-bar
Published
2022-05-09
Title
Call&Book Mobile Bar <= 1.2.2 - Admin+ Stored Cross Site Scripting
Slug
callphoner
Published
2025-03-24
Title
CallPhone'r <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting