| CVE-2025-9808 |
The The Events Calendar plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including,…
|
5.3
Medium
|
Sep 16, 2025 |
| CVE-2025-9807 |
The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all…
|
7.5
High
|
Sep 12, 2025 |
| CVE-2025-5144 |
The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-*’…
|
6.4
Medium
|
Jun 11, 2025 |
| CVE-2024-12118 |
The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link…
|
6.4
Medium
|
Jan 23, 2025 |
| CVE-2022-4974 |
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
|
6.3
Medium
|
Oct 16, 2024 |
| CVE-2024-6931 |
The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via RSVP name field in all…
|
7.2
High
|
Sep 27, 2024 |
| CVE-2024-8275 |
The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the…
|
9.8
Critical
|
Sep 25, 2024 |
| CVE-2023-6557 |
The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,…
|
5.3
Medium
|
Feb 5, 2024 |