Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 54
Reset filtersThe Events Calendar <= 6.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
The Events Calendar Countdown Addon <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Events Calendar <= 6.11.2.1 - Missing Authorization
Registrations for the Events Calendar <= 2.13.2 - Authenticated (Admin+) Stored Cross-Site Scripting
The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Events Calendar <= 6.7.0 - Cross-Site Request Forgery
Add infos to the events calendar <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Events Calendar <= 6.8.2 - Missing Authorization to Unauthenticated Password Protected Event Disclosure
Registrations for the Events Calendar – Event Registration Plugin <= 2.12.3 - Unauthenticated Stored Cross-Site Scripting
The Events Calendar <= 6.6.4 - Unauthenticated SQL Injection
Registrations for the Events Calendar <= 2.12.1 - Missing Authorization
The Events Calendar <= 6.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Registrations for the Events Calendar – Event Registration Plugin <= 2.12.2 - Authenticated (Contributor+) SQL Injection
The Events Calendar <= 6.6.3 - Unauthenticated Stored Cross-Site Scripting
The Events Calendar <= 6.5.1.4 - Cross-Site Request Forgery via action_restore_events
The Events Calendar Free & Pro <= 6.4.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Events Access
The Events Calendar <= 6.4.0 - Reflected Cross-Site Scripting
The Events Calendar <= 6.2.8.2 - Unauthenticated Sensitive Information Exposure
The Events Calendar <= 6.2.8 - Information Disclosure
The Events Calendar <= 6.1.2.2 - Missing Authorization
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.