WordPress Plugin Vulnerabilities

Calendar <= 1.3.2 - Entry Addition Cross-Site Request Forgery (CSRF)

Description

The Calendar WordPress plugin was affected by an Entry Addition Cross-Site Request Forgery (CSRF) security vulnerability.

Affects Plugins

Plugin icon
calendar
Fixed in 1.3.3

References

CVE
CVE-2013-2698

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
5c6ab9be-a1b9-414d-b946-aba47fca39c3

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-12-04
Title
User Generator and Importer <= 1.2.2 - Cross-Site Request Forgery to Privilege Escalation via Arbitrary Administrator Account Creation
Published
2024-02-27
Title
MainWP Dashboard < 5.0 - Cross-Site Request Forgery via posting_bulk
Published
2022-01-24
Title
Access Demo Importer < 1.0.8 - Arbitrary Plugin Activation via CSRF
Published
2023-03-17
Title
WP-Advanced-Search < 3.3.9 - Settings Update via CSRF
Published
2025-02-27
Title
RateMyAgent Official < 1.5.0 - Cross-Site Request Forgery to API Key Update