Extension WordPress
Vulnérabilités Event Calendar WD version
Cette page rassemble les failles publiées pour Event Calendar WD version, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Event Calendar WD version
6 fiches
Event Calendar <= 1.1.50 – Reflected Cross-Site Scripting
The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues
*-1.1.50
1.1.51
20/12/2021
Event Calendar <= 1.1.50 – Subscriber+ Event Creation
The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create events
*-1.1.50
1.1.51
20/12/2021
EventCalendar <= 1.1.45 – Cross-Site Scripting
The Event Calendar WD plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.1.45 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts…
*-1.1.45
1.1.46
25/06/2021
Event Calendar <= 1.1.44 – Cross-Site Scripting
The Event Calendar WD plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.1.44 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts…
[*, 1.1.45)
1.1.45
31/05/2021
EventCalendar <= 1.1.21 – Cross-Site Scripting
Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
*-1.1.21
1.1.22
02/11/2018
EventCalendar < 1.0.94 – Authenticated Cross-Site Scripting
The EventCalendar plugin for WordPress is vulnerable to Cross-Site Scripting in versions before 1.0.94 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's…
[*, 1.0.94)
1.0.94
20/06/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.