← Back

Event Calendar

event_calendar

Vendor: Total Soft • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-8700
1Total Soft
1Event Calendar
Jun 17, 2026
May 15, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.
CVE-2022-36390
1Total Soft
1Event Calendar
Jun 17, 2026
Sep 21, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.
CVE-2022-38067
1Total Soft
1Event Calendar
Jun 17, 2026
Sep 9, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.