The Events Calendar Security Vulnerabilities and Issues — The Events Calendar CVE List

Lucene search

TheeventscalendarThe Events Calendar

3 matches found

CVE•added 2024/06/14 6:15 a.m.•60 views

CVE-2024-1295

The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn't have access to. (e.g. password-protected events, drafts, etc.)

6.5CVSS6.7AI score0.00659EPSS

CVE•added 2025/06/11 1:15 p.m.•51 views

CVE-2025-5144

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-*’ parameters in all versions up to, and including, 6.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-le...

6.4CVSS5.7AI score0.00044EPSS

CVE•added 2025/01/23 12:15 p.m.•43 views

CVE-2024-12118

The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the html_tag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

6.4CVSS5.8AI score0.0003EPSS