Medium
CVE-2026-77186
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 22
Reset filters
Medium
CVE-2026-77187
My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes
High
CVE-2026-6854
My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters
Medium
CVE-2026-11896
My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter
Medium
CVE-2026-7525
My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter
Medium
CVE-2026-40308
My Calendar < 3.7.7 - Unauthenticated Denial of Service
Medium
CVE-2026-2355
My Calendar – Accessible Event Manager <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Medium
CVE-2025-67592
My Calendar <= 3.6.16 - Missing Authorization
Medium
CVE-2024-25916
My Calendar <= 3.4.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1274
My Calendar <= 3.4.23 - Authenticated (Admin+) Stored Cross-Site Scripting via Events
Critical
CVE-2023-6360
My Calendar <= 3.4.21 - Unauthenticated SQL Injection
High
CVE-2023-23813
My Calendar <= 3.4.3 - Cross-Site Request Forgery
High
CVE-2022-47427
My Calendar <= 3.3.24.1 - Cross-Site Request Forgery
Medium
CVE-2022-36371
My Calendar <= 3.3.16 - Open Redirect
Medium
801132f5-e4ea-4d56-8429-9f33896f6dff
My Calendar <= 3.3.16 - Administrator+ Stored Cross-Site Scripting
Medium
CVE-2021-24927
My Calendar <= 3.2.17 - Subscriber+ Reflected Cross-Site Scripting
Medium
CVE-2019-15713
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting
Medium
a42dce68-0e64-46a6-926e-b676071744b9
My Calendar <= 2.5.16 - Authenticated Stored Cross-Site Scripting
Critical
cfffe880-e3f9-4163-a726-e248433e1034
My Calendar <= 2.3.29 - Path Traversal to Remote Code Execution
Medium
8de8a412-af19-4a1e-a131-47815b38517f
My Calendar < 2.3.30 - Reflected Cross-Site Scripting
Medium
d8a56a1c-6af0-47e6-906c-bb3eb1440eb9
My Calendar < 2.3.10 - Reflected Cross-Site Scripting
Medium
CVE-2012-6527
My Calendar < 1.10.5 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.