Log out
Get PRO

Latest

Input validation vulnerability in Calendar 1.3.14

  • Severity: high-risk
  • Status: Open
  • Publication: April 29, 2024

The Calendar plugin for WordPress has a security issue that allows attackers to access sensitive information from the database. This vulnerability is present in all versions up to 1.3.14 and is caused by inadequate protection on user input and lack of preparation in the SQL query. This means that attackers with contributor access or higher can add their own queries to the existing ones, potentially gaining access to sensitive data.

Detected in:

Calendar open vulnerable versions: >= * <= 1.3.14

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.