Kieranoshea Calendar
4 CVEs affecting Kieranoshea Calendar. Latest disclosed: 2025-12-23. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2831 | High | 8.8 | 2024-05-02 | The Calendar plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcodes in all versions up to, and including, 1.3.14 due to insufficient e… |
CVE-2025-14548 | Medium | 6.4 | 2025-12-23 | The Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'event_desc' parameter in all versions up to, and including, 1.3.16 due… |
CVE-2018-18872 | Medium | 5.4 | 2019-05-13 | The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title parameter in a wp-admin/admin.php?page=calendar add action, or… |
CVE-2013-2698 | | 2014-05-27 | Cross-site request forgery (CSRF) vulnerability in the Calendar plugin before 1.3.3 for WordPress allows remote attackers to hijack the authentication of users… |