VendorsKieran O'Sheacalendarall versions
Vulnerabilities

Kieran O'Shea kieranoshea Calendar plugin for WordPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2013-2698
Cross-site request forgery (CSRF) vulnerability in the Calendar plugin before 1.3.3 for WordPress allows remote attackers to hijack the authentication of users for requests that add a calendar entry via unspecified vectors.
Published 2014-05-27 · Modified
6.8EPSS 0.011
CVE-2018-18872
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI.
Published 2019-05-13 · Modified
5.4EPSS 0.007