Threat Entry Updated 2025-06-04

CVE-2024-8700 - Event Calendar Plugin

The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.

PLUGIN Event Calendar

CVE-2024-8700

HIGH CVSS 7.5 2025-05-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-36390 - Event Calendar Plugin

Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin

PLUGIN Event Calendar

CVE-2022-36390

MEDIUM CVSS 4.1 2022-09-21

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-38067 - Event Calendar Plugin

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin

PLUGIN Event Calendar

CVE-2022-38067

MEDIUM CVSS 6.5 2022-09-09

Risk Score

Open Full Technical Breakdown