CVE-2022-36390

The CVE-2022-36390 entry concerns the WordPress Totalsoft Event Calendar – Calendar plugin (versions 1.4.6 and earlier). The root cause is an authenticated reflected cross-site scripting (XSS) vulnerability in the plugin’s handling of input, which can affect authenticated users (subscriber+). Pra...

CVE-2022-38067

CVE-2022-38067 affects the WordPress plugin Totalsoft Event Calendar – Calendar (versions

CVE-2024-8700

The Event Calendar WordPress plugin (versions 1.0.0 through 1.0.4 ) contains a vulnerability where it fails to perform authorization checks on delete actions. This flaw allows unauthenticated users to perform unauthorized arbitrary calendar deletions . To mitigate this risk, it is recommended to ...