Vulnerability history

Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability

Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication vulnerability

Unauthenticated Denial of Service vulnerability

WordPress My Calendar - Accessible Event Manager plugin <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Broken Access Control vulnerability

Authenticated Stored XSS vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Open Redirect vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting (XSS) vulnerability

Multiple Vulnerabilities

Multiple Vulnerabilities

Cross Site Scripting

XSS