Log in Get started
Vulnerability database / Plugins / my-calendar-accessible-event-manager

My Calendar Accessible Event Manager

WordPress plugin · my-calendar-accessible-event-manager · WordPress.org ↗
1
Critical
0
High
3
Known total
2
Unfixed
Running My Calendar Accessible Event Manager on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.
Scan a site Monitor my sites →
SeverityVulnerabilityAffectedFixed inCVEPublished
CRITICAL
CVSS 9.8
 My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute
CVE.org
 <=3.4.24; <=3.5.21; <=3.6.17; <=3.7.17; <=3.8.7 unfixed CVE-2026-104798 Oct 16, 2026
MEDIUM
CVSS 6.9
 My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter
CVE.org
 >=3.8.8, <3.8.11 v3.8.11 CVE-2026-119714 Oct 30, 2026
MEDIUM
CVSS 6.4
 My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fallback' Shortcode Attribute
CVE.org
 <=3.8.3 unfixed CVE-2026-77186 Sep 9, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.