Advisories · Technology

Totalsoft Event Calendar – Calendar (WordPress plugin).

Every CVE that names Totalsoft Event Calendar – Calendar (WordPress plugin) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-36390 CVE record

CVSS 4.1 Medium

WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
- Totalsoft Event Calendar – Calendar (WordPress plugin)
- Cross-site scripting (XSS)
Not analysed yet 21 Sept 2022
CVE-2022-38067 CVE record

CVSS 6.5 Medium

WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability
- Totalsoft Event Calendar – Calendar (WordPress plugin)
- CWE-264
Not analysed yet 9 Sept 2022