The Events Calendar@* Security Vulnerabilities and Issues — The Events Calendar@* CVE List

Lucene search

StellarwpThe Events Calendar*

2 matches found

CVE•added 2025/06/11 1:15 p.m.•51 views

CVE-2025-5144

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-*’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-le...

6.4CVSS5.7AI score0.00044EPSS

CVE•added 2025/05/15 8:15 p.m.•14 views

CVE-2024-8493

The Events Calendar WordPress plugin before 6.6.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

4.8CVSS5.7AI score0.00039EPSS