Media
CVE-2026-77186
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 22
Restablecer filtros
Media
CVE-2026-77187
My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes
Alta
CVE-2026-6854
My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters
Media
CVE-2026-11896
My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter
Media
CVE-2026-7525
My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter
Media
CVE-2026-40308
My Calendar < 3.7.7 - Unauthenticated Denial of Service
Media
CVE-2026-2355
My Calendar – Accessible Event Manager <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Media
CVE-2025-67592
My Calendar <= 3.6.16 - Missing Authorization
Media
CVE-2024-25916
My Calendar <= 3.4.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-1274
My Calendar <= 3.4.23 - Authenticated (Admin+) Stored Cross-Site Scripting via Events
Crítica
CVE-2023-6360
My Calendar <= 3.4.21 - Unauthenticated SQL Injection
Alta
CVE-2023-23813
My Calendar <= 3.4.3 - Cross-Site Request Forgery
Alta
CVE-2022-47427
My Calendar <= 3.3.24.1 - Cross-Site Request Forgery
Media
CVE-2022-36371
My Calendar <= 3.3.16 - Open Redirect
Media
801132f5-e4ea-4d56-8429-9f33896f6dff
My Calendar <= 3.3.16 - Administrator+ Stored Cross-Site Scripting
Media
CVE-2021-24927
My Calendar <= 3.2.17 - Subscriber+ Reflected Cross-Site Scripting
Media
CVE-2019-15713
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting
Media
a42dce68-0e64-46a6-926e-b676071744b9
My Calendar <= 2.5.16 - Authenticated Stored Cross-Site Scripting
Crítica
cfffe880-e3f9-4163-a726-e248433e1034
My Calendar <= 2.3.29 - Path Traversal to Remote Code Execution
Media
8de8a412-af19-4a1e-a131-47815b38517f
My Calendar < 2.3.30 - Reflected Cross-Site Scripting
Media
d8a56a1c-6af0-47e6-906c-bb3eb1440eb9
My Calendar < 2.3.10 - Reflected Cross-Site Scripting
Media
CVE-2012-6527
My Calendar < 1.10.5 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.