| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-8700 | Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion | Unknown | Event Calendar | - | - | 2025-05-15 20:07:18 | Deep Dive |
| CVE-2024-8701 | Event Calendar <= 1.0.4 - Admin+ Stored XSS | Unknown | events-calendar | - | - | 2025-05-15 20:07:18 | Deep Dive |
| CVE-2024-8493 | The Events Calendar < 6.6.4 - Admin+ Stored XSS | Unknown | The Events Calendar | - | - | 2025-05-15 20:07:16 | Deep Dive |
| CVE-2025-3769 | Latepoint <= 5.1.92 - Unauthenticated Insecure Direct Object Reference | latepoint | LatePoint – Calendar Booking Plugin for Appointments and Events | Medium | 5.3 | 2025-05-14 11:12:26 | Deep Dive |
| CVE-2025-3419 | Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read | arraytics | Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) | High | 7.5 | 2025-05-08 05:22:51 | Deep Dive |
| CVE-2025-47542 | WordPress Simple calendar for Elementor plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) Vulnerability | Michael | Simple calendar for Elementor | Medium | 4.3 | 2025-05-07 14:20:15 | Deep Dive |
| CVE-2025-46528 | WordPress Availability Calendar plugin <= 0.2.4 - Cross Site Request Forgery (CSRF) Vulnerability | Steve | Availability Calendar | High | 7.1 | 2025-04-24 16:08:59 | Deep Dive |
| CVE-2025-46510 | WordPress Contact Form 7 Calendar plugin <= 3.0.1 - CSRF to Stored XSS vulnerability | harrysudana | Contact Form 7 Calendar | High | 7.1 | 2025-04-24 16:08:55 | Deep Dive |
| CVE-2025-46249 | WordPress Simple calendar for Elementor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability | Michael | Simple calendar for Elementor | Medium | 4.3 | 2025-04-22 09:53:32 | Deep Dive |
| CVE-2025-46247 | WordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control Vulnerability | codepeople | Appointment Booking Calendar | Medium | 5.3 | 2025-04-22 09:53:32 | Deep Dive |
| CVE-2025-46241 | WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability | codepeople | Appointment Booking Calendar | High | 8.2 | 2025-04-22 09:53:28 | Deep Dive |
| CVE-2025-32597 | WordPress WordPress Events Calendar Plugin – connectDaily plugin <= 1.5.4 - CSRF to Cross-Site Scripting vulnerability | George Sexton | WordPress Events Calendar Plugin – connectDaily | High | 7.1 | 2025-04-09 16:09:30 | Deep Dive |
| CVE-2025-32238 | WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability | vcita | Online Booking & Scheduling Calendar for WordPress by vcita | Medium | 4.3 | 2025-04-04 15:59:22 | Deep Dive |
| CVE-2025-32174 | WordPress Tockify Events Calendar plugin <= 2.2.13 - Cross Site Scripting (XSS) vulnerability | Tockify | Tockify Events Calendar | Medium | 6.5 | 2025-04-04 15:58:54 | Deep Dive |
| CVE-2025-31381 | WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability | shiptrack | Booking Calendar and Notification | Medium | 6.5 | 2025-04-04 13:44:44 | Deep Dive |
| CVE-2025-31403 | WordPress Booking Calendar and Notification plugin <= 4.0.3 - SQL Injection vulnerability | shiptrack | Booking Calendar and Notification | Critical | 9.3 | 2025-04-04 13:34:43 | Deep Dive |
| CVE-2025-31462 | WordPress CGM Event Calendar plugin <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability | rzfarrell | CGM Event Calendar | High | 7.1 | 2025-04-01 20:58:11 | Deep Dive |
| CVE-2025-31589 | WordPress Ethiopian Calendar plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability | Kibru Demeke | Ethiopian Calendar | Medium | 6.5 | 2025-03-31 12:55:28 | Deep Dive |
| CVE-2025-31572 | WordPress Multi Days Events and Multi Events in One Day Calendar plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability | v20202020 | Multi Days Events and Multi Events in One Day Calendar | Medium | 4.3 | 2025-03-31 12:55:21 | Deep Dive |
| CVE-2025-2578 | Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure | ameliabooking | Booking for Appointments and Events Calendar – Amelia | Medium | 5.3 | 2025-03-28 07:33:04 | Deep Dive |