Vulnerabilities / Open Source Event Calendar
Open Source Event Calendar vulnerabilities
Advisories WPSec published for Open Source Event Calendar. Other sources may list more. Its attack surface: Open Source Event Calendar on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2413 | Open Source Event Calendar <= 1.2.0 - Authenticated (Author+) Missing Authorization to Arbitrary Post Modification via 'Edit this instance' | Medium 6.5 | 1.2.1 |
| 2026-11-03 | WPSEC-2026-2412 | Open Source Event Calendar <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via Parent Event Title | Medium 6.4 | 1.2.1 |
| 2026-11-03 | WPSEC-2026-2411 | Open Source Event Calendar <= 1.2.0 - Authenticated (Author+) Missing Authorization to Sensitive Information Exposure via Bulk Clone | Medium 4.3 | 1.2.1 |
License: CC BY 4.0