Totalsoft Event Calendar – Calendar (Wordpress Plugin)
2 CVEs affecting Totalsoft Event Calendar – Calendar (Wordpress Plugin). Latest disclosed: 2022-09-21. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-38067 | Medium | 6.5 | 2022-09-09 | Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress. |
CVE-2022-36390 | Medium | 4.1 | 2022-09-21 | Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress. |