WordPress Vulnerability Scanner WPSec
Vulnerabilities / My Calendar

My Calendar vulnerabilities

Advisories WPSec published for My Calendar – Accessible Event Manager. Other sources may list more. Its attack surface: My Calendar on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-15 WPSEC-2026-1025 My Calendar <= 3.8.7 - Unauthenticated Arbitrary Function Call via Calendar Navigation 'above' and 'below' Attributes Critical 9.8 3.8.8
2026-10-15 WPSEC-2026-1024 My Calendar <= 3.8.7 - Unauthenticated Arbitrary Shortcode Execution via 'mcs' and Query String Parameters High 7.3 3.8.8
2026-10-15 WPSEC-2026-1023 My Calendar <= 3.7.17 - Unauthenticated Arbitrary Shortcode Execution via 'mcs' and Query String Parameters High 7.3 3.7.18
2026-10-15 WPSEC-2026-1022 My Calendar <= 3.7.17 - Unauthenticated Arbitrary Function Call via Calendar Navigation 'above' and 'below' Attributes Critical 9.8 3.7.18
2026-10-15 WPSEC-2026-1021 My Calendar <= 3.6.17 - Unauthenticated Arbitrary Function Call via Calendar Navigation 'above' and 'below' Attributes Critical 9.8 3.6.18
2026-10-15 WPSEC-2026-1019 My Calendar <= 3.5.21 - Unauthenticated Arbitrary Function Call via Calendar Navigation 'above' and 'below' Attributes Critical 9.8 3.5.22
2026-10-15 WPSEC-2026-1018 My Calendar <= 3.4.24 - Unauthenticated Arbitrary Shortcode Execution via 'mcs' and Query String Parameters High 7.3 3.4.25
2026-10-15 WPSEC-2026-1017 My Calendar <= 3.4.24 - Unauthenticated Arbitrary Function Call via Calendar Navigation 'above' and 'below' Attributes Critical 9.8 3.4.25

License: CC BY 4.0