Login Request a demo
MY
Product
my-calendar
by joedolson · last CVE Apr 16, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 0
Severity
All severities4Critical1High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add my-calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-6360
9.8
63%
Nov 30
The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' parameters in the…
Affected: before 3.4.22
CVE-2026-40308
8.8
1%
Apr 16
My Calendar: Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog
Affected: < 3.7.7
CVE-2024-1274
5.4
0%
Apr 2
The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site…
Affected: before 3.4.24
CVE-2012-6527
–
2%
Jan 31
Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO
Affected: through 1.10.1; 1.1.0; 1.2.0; 1.2.1; 1.4.0; 1.4.1; +34 more
Showing 4