TE
Product
The Events Calendar
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 17Low 0
Watch
Add The Events Calendar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3585 | 7.5 | Mar 10 | The Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_import Affected: through 6.15.17 |
| CVE-2025-12197 | 7.5 | Nov 5 | The Events Calendar 6.15.1.1 - 6.15.9 - Unauthenticated SQL Injection via s Affected: 6.15.1.1 through 6.15.9 |
| CVE-2025-9807 | 7.5 | Sep 12 | The Events Calendar <= 6.15.1 - Unauthenticated SQL Injection Affected: through 6.15.1 |
| CVE-2023-6203 | 7.5 | Dec 18 | The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read Affected: before 6.2.8.1 |
Showing 4