Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 54
Reset filtersThe Events Calendar <= 6.17.5 - Missing Authorization
The Events Calendar 6.12.0 - 6.17.5 - Unauthenticated Arbitrary Shortcode Execution
The Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Information Exposure
The Events Calendar 6.15.16.1 - 6.17.4.1 - Missing Authorization
The Events Calendar 6.15.0 - 6.17.4.1 - Missing Authorization
The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation
The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution
The Events Calendar < 6.17.3.1 - Authenticated (Contributor+) Information Exposure
The Events Calendar <= 6.17.2 - Unauthenticated PHP Object Injection
Registrations for the Events Calendar <= 3.2 - Authenticated (Contributor+) SQL Injection via 'standard' Parameter
The Events Calendar <= 6.16.5.0 - Missing Authorization
The Events Calendar 6.15.12-6.16.2 - Unauthenticated SQL Injection
The Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_import
The Events Calendar <= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST API
The Events Calendar Shortcode & Block <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
The Events Calendar Shortcode & Block <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Events Calendar <= 6.15.13 - Missing Authorization to Authenticated (Subscriber+) Data Migration Control
The Events Calendar <= 6.15.12.2 - Missing Authorization
The Events Calendar Countdown Addon <= 1.4.15 - Missing Authorization
The Events Calendar <= 6.15.9 - Sysinfo Key Incorrect Comparison to Unauthenticated Sensitive Information Exposure
The Events Calendar 6.15.1.1 - 6.15.9 - Unauthenticated SQL Injection via s
The Events Calendar <= 6.15.9 - Missing Authorization to Authenticated (Subscriber+) Draft Event Title/QR Code Exposure
The Events Calendar <= 6.15.2 - Missing Authorization to Unauthenticated Password-Protected Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.