| CVE-2026-84740 |
The Events Calendar WordPress plugin before 6.17.5.1 does not validate or sanitise data submitted to an…
|
6.5
Moyenne
|
2 oct. 2026 |
| CVE-2026-84741 |
The Events Calendar WordPress plugin before 6.17.5 does not check the post status of linked records before embedding…
|
5.3
Moyenne
|
23 sept. 2026 |
| CVE-2026-84742 |
The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before…
|
2.7
Faible
|
23 sept. 2026 |
| CVE-2026-84743 |
The Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on one family of its…
|
3.8
Faible
|
23 sept. 2026 |
| CVE-2026-84745 |
The Events Calendar WordPress plugin before 6.17.3.1 does not restrict non-public content to the users entitled to…
|
2.7
Faible
|
5 sept. 2026 |
| CVE-2026-13390 |
The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event…
|
5.3
Moyenne
|
27 juil. 2026 |
| CVE-2024-8493 |
The Events Calendar WordPress plugin before 6.6.4 does not sanitise and escape some of its settings, which could allow…
|
4.8
Moyenne
|
15 mai 2025 |
| CVE-2024-5333 |
The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for…
|
5.3
Moyenne
|
16 déc. 2024 |
| CVE-2024-1295 |
The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not…
|
6.5
Moyenne
|
14 juin 2024 |
| CVE-2024-4180 |
The Events Calendar WordPress plugin before 6.4.0.1 does not properly sanitize user-submitted content when rendering…
|
9.1
Critique
|
4 juin 2024 |
| CVE-2023-6203 |
The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated…
|
Non notée
|
18 déc. 2023 |