Extension WordPress
Vulnérabilités The Events Calendar Shortcode & Block
Cette page rassemble les failles publiées pour The Events Calendar Shortcode & Block, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de The Events Calendar Shortcode & Block
2 fiches
The Events Calendar Shortcode & Block <= 3.1.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ecs-list-events` shortcode `message` attribute in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output…
*-3.1.2
3.1.3
09/02/2026
The Events Calendar Shortcode & Block <= 3.1.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-3.1.1
3.1.2
04/02/2026
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.