WordPress plugin Ethiopian Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-13726

Name of the Vulnerable Software and Affected Versions v20202020 Multi Days Events and Multi Events in One Day Calendar versions n/d through 1.1.3 Description The issue is related to a Cross-Site Request Forgery CSRF problem, which affects the Multi Days Events and Multi Events in One Day Calendar...

CVE-2025-31589: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kibru Demeke Ethiopian Calendar ethiopian-calendar allows Stored XSS.This issue affects Ethiopian Calendar: from n/a through = 1.1.1...

About the security content of tvOS 18.4

About the security content of tvOS 18.4 This document describes the security content of tvOS 18.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2025-22497

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bramwaas Simple Google Calendar Outlook Events Block Widget simple-google-icalendar-widget allows Stored XSS.This issue affects Simple Google Calendar Outlook Events Block Widget: from n/a through ...

CVE-2025-28939

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in EuroCizia WP Google Calendar Manager wp-gcalendar allows Blind SQL Injection.This issue affects WP Google Calendar Manager: from n/a through = 2.1...

CVE-2025-26536

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yendif Player Another Events Calendar another-events-calendar allows Reflected XSS.This issue affects Another Events Calendar: from n/a through = 1.7.0...

CVE-2025-2578: Exposure of Sensitive Information to an Unauthorized Actor

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.19 via the 'wpAmeliaApiCall' function. This makes it possible for unauthenticated attackers to retrieve the full path of the web...

CVE-2025-22497

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bramwaas Simple Google Calendar Outlook Events Block Widget simple-google-icalendar-widget allows Stored XSS.This issue affects Simple Google Calendar Outlook Events Block Widget: from n/a through ...

CVE-2025-22497

CVE-2025-22497 affects WordPress plugin Simple Google Calendar Outlook Events Widget (

CVE-2024-10703

The Registrations for the Events Calendar WordPress plugin before 2.13.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

PT-2025-13268

Name of the Vulnerable Software and Affected Versions Simple Google Calendar Outlook Events Block Widget versions 2.5.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS...

CVE-2025-22497: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bramwaas Simple Google Calendar Outlook Events Block Widget simple-google-icalendar-widget allows Stored XSS.This issue affects Simple Google Calendar Outlook Events Block Widget: from n/a through ...

CVE-2025-28939

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in EuroCizia WP Google Calendar Manager wp-gcalendar allows Blind SQL Injection.This issue affects WP Google Calendar Manager: from n/a through = 2.1...

CVE-2025-26536

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yendif Player Another Events Calendar another-events-calendar allows Reflected XSS.This issue affects Another Events Calendar: from n/a through = 1.7.0...

CVE-2025-28939 WordPress WP Google Calendar Manager plugin <= 2.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in EuroCizia WP Google Calendar Manager wp-gcalendar allows Blind SQL Injection.This issue affects WP Google Calendar Manager: from n/a through = 2.1...

CVE-2025-28939 WordPress WP Google Calendar Manager plugin <= 2.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in EuroCizia WP Google Calendar Manager wp-gcalendar allows Blind SQL Injection.This issue affects WP Google Calendar Manager: from n/a through = 2.1...

CVE-2025-28939

CVE-2025-28939 concerns the WordPress plugin WP Google Calendar Manager (NotFound)

CVE-2025-26536 WordPress Another Events Calendar Plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yendif Player Another Events Calendar another-events-calendar allows Reflected XSS.This issue affects Another Events Calendar: from n/a through = 1.7.0...

CVE-2025-26536

CVE-2025-26536 in WordPress plugin Another Events Calendar (versions &lt;= 1.7.0) is a Reflected XSS vulnerability caused by improper input handling during web page generation. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L with a base score of 7.1 (HIGH). This entry’s conne...