← WordPress Vulnerabilities
WordPress security by component

Event Calendar

Event Calendar creates and displays event calendars on WordPress websites.

Event Calendar (event-calendar) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published May 15, 2025; the highest published CVSS base score is 7.5.

Plugin slug: event-calendar

CVE-2024-8700: Event Calendar: A security weakness

Event Calendar is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedMay 15, 2025
Safe version guidanceSee mitigation notes
Published vulnerabilities for event-calendar
Safe version
May 15, 2025 CVE-2024-8700
Event Calendar: A security weakness
Event Calendar is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE7.5
NVDPending