My Calendar – Accessible Event Manager

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in My Calendar 3.4.23

    Fixed

    The My Calendar plugin for WordPress has a security issue where attackers can inject harmful web scripts into event dates. This can only be done by someone who has admin-level access or higher.

    Read More
  • Input validation vulnerability in My Calendar 3.4.23

    Fixed

    The My Calendar plugin for WordPress has a security issue that allows attackers to insert harmful code into a website. This can happen when a user with certain access levels uses the plugin's shortco...

    Read More
  • Input validation vulnerability in My Calendar 3.4.21

    Fixed

    The My Calendar plugin for WordPress is a plugin that has a security vulnerability that could allow unauthenticated attackers to access sensitive information from the database. This vulnerability exi...

    Read More
  • Access violation vulnerability in My Calendar 2.3.29

    Fixed

    The My Calendar plugin for WordPress is vulnerable to an attack called Path Traversal. This attack affects versions up to 2.3.29 of the plugin. The attack is possible by using the 'edit_my_calendar_s...

    Read More
  • Input validation vulnerability in My Calendar 2.3.10

    Fixed

    The My Calendar plugin is a tool used on WordPress websites that lets users manage and display events on their website. Unfortunately, versions of the plugin prior to 2.3.10 have a security issue tha...

    Read More
  • Input validation vulnerability in My Calendar 3.1.9

    Fixed

    The my-calendar plugin

    Read More
  • Input validation vulnerability in My Calendar 3.2.17

    Fixed

    Read More
  • Input validation vulnerability in My Calendar 1.10.5

    Fixed

    The My Calendar plugin for WordPress

    Read More
  • Input validation vulnerability in My Calendar 2.5.17

    Fixed

    The My Calendar plugin for WordPress is not secure in versions up to and including 2.6.16. Attackers who have permission to make changes to the website can inject malicious code into the website, whi...

    Read More
  • Input validation vulnerability in My Calendar 3.3.16

    Fixed

    The My Calendar plugin for WordPress is vulnerable to a security issue. It is possible for someone with administrator-level permissions to inject malicious code into pages within the plugin. This mal...

    Read More
  • Input validation vulnerability in My Calendar 2.3.30

    Fixed

    The My Calendar plugin for WordPress is not secure in versions prior to 2.3.30. Attackers may be able to inject malicious code into webpages if a user performs a certain action, such as clicking on a...

    Read More
  • Input validation vulnerability in My Calendar 3.3.16

    Fixed

    The My Calendar plugin for WordPress has a security issue in versions 3.3.16 and earlier. Attackers who are not logged in to the site can create links that look like they could be part of the website

    Read More
  • Input validation vulnerability in My Calendar 3.4.3

    Fixed

    The My Calendar plugin for WordPress, up to and including version 3.4.3, is vulnerable to Cross-Site Request Forgery. This means that attackers who are not logged in can send requests to the website ...

    Read More
  • Input validation vulnerability in My Calendar 3.3.24.1

    Fixed

    The My Calendar plugin for WordPress has a security issue in versions up to 3.3.24.1. An attacker who tricks a site administrator into clicking a link can remove events or locations from the site with...

    Read More