My Calendar
Joe Dolson
Developer
3.8.4
Latest version
20,000
Installations
No date
Last updated
Vulnerability history
0 present
19 patched
3 Mitigation rules
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.8.312 hours ago
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.8.312 hours ago
- Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability<= 3.7.1401/07/2026
- Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication vulnerability<= 3.7.913/05/2026
- Unauthenticated Denial of Service vulnerability< 3.7.716/04/2026
- WordPress My Calendar - Accessible Event Manager plugin <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability<= 3.7.304/03/2026
- Broken Access Control vulnerability<= 3.6.1615/12/2025
- Authenticated Stored XSS vulnerability< 3.4.2402/04/2024
- Cross Site Scripting (XSS) vulnerability<= 3.4.2314/02/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 3.4.320/01/2023
- Cross Site Request Forgery (CSRF) vulnerability<= 3.3.24.104/01/2023
- Unauthenticated Open Redirect vulnerability<= 3.3.1602/08/2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 3.2.1701/11/2021
- Unauthenticated Cross-Site Scripting (XSS) vulnerability<= 3.1.906/05/2019
- Authenticated Cross-Site Scripting (XSS) vulnerability<= 2.5.1605/04/2018
- Multiple Vulnerabilities<= 2.4.1006/11/2015
- Multiple Vulnerabilities<= 2.3.2915/05/2015
- Cross Site Scripting<= 2.3.2820/04/2015
- XSS<= 1.10.130/01/2013