The Events Calendar

WordPress plugin · the-events-calendar · WordPress.org ↗

Latest v6.18.3.1 Last release Nov 5, 2026 Tested up to WP 7.1.4 600,000+ active installs

Critical

High

Known total

Unfixed

Running The Events Calendar on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 9.8	The Events Calendar [the-events-calendar] < 6.17.4.1 WPVulnerability	< 6.17.4.1	v6.17.4.1	CVE-2026-95606	Sep 30, 2026
CRITICAL CVSS 9.8	The Events Calendar [the-events-calendar] < 6.17.3.1 WPVulnerability	< 6.17.3.1	v6.17.3.1	CVE-2026-78159	Sep 11, 2026
CRITICAL CVSS 9.8	The Events Calendar [the-events-calendar] < 6.17.4.1 WPVulnerability	< 6.17.4.1	v6.17.4.1	CVE-2026-78006	Sep 11, 2026
CRITICAL CVSS 9.8	The Events Calendar [the-events-calendar] < 6.17.3 WPVulnerability	< 6.17.3	v6.17.3	CVE-2026-78265	Aug 24, 2026
CRITICAL CVSS 9.3	The Events Calendar [the-events-calendar] < 6.16.3 WPVulnerability	< 6.16.3	v6.16.3	CVE-2026-49772	Jun 8, 2026
CRITICAL CVSS 9.8	The Events Calendar [the-events-calendar] < 6.6.4.1 WPVulnerability	< 6.6.4.1	v6.6.4.1	CVE-2024-8275	Sep 24, 2024
CRITICAL CVSS 9.1	The Events Calendar [the-events-calendar] < 6.4.0.1 WPVulnerability · PoC available	< 6.4.0.1	v6.4.0.1	CVE-2024-4180	May 14, 2024
HIGH CVSS 7.5	The Events Calendar [the-events-calendar] < 6.15.10 WPVulnerability	< 6.15.10	v6.15.10	CVE-2025-12197	Nov 4, 2025
HIGH CVSS 7.5	The Events Calendar [the-events-calendar] < 6.15.1.1 WPVulnerability	< 6.15.1.1	v6.15.1.1	CVE-2025-9807	Sep 11, 2025
HIGH CVSS 7.5	The Events Calendar [the-events-calendar] < 6.2.8.1 WPVulnerability	< 6.2.8.1	v6.2.8.1	CVE-2023-6203	Nov 20, 2023
HIGH CVSS 7.1	The Events Calendar [the-events-calendar] < 6.1.0 WPVulnerability	< 6.1.0	v6.1.0	CVE-2023-33999	Jul 18, 2023
MEDIUM CVSS 6.5	The Events Calendar [the-events-calendar] < 6.18.3 WPVulnerability	< 6.18.3	v6.18.3	CVE-2026-119370	Oct 30, 2026
MEDIUM CVSS 5.4	The Events Calendar [the-events-calendar] < 6.18.3 WPVulnerability	< 6.18.3	v6.18.3	CVE-2026-119367	Oct 30, 2026
MEDIUM CVSS 5.3	The Events Calendar [the-events-calendar] < 6.18.3 WPVulnerability	< 6.18.3	v6.18.3	CVE-2026-119368	Oct 30, 2026
MEDIUM CVSS 6.5	The Events Calendar [the-events-calendar] < 6.18.3 WPVulnerability	< 6.18.3	v6.18.3	CVE-2026-119369	Oct 30, 2026
MEDIUM CVSS 6.5	The Events Calendar 6.12.0 - 6.17.5 - Unauthenticated Arbitrary Shortcode Execution via 'view_data' Parameter CVE.org	>=6.12.0, <6.17.5.1	v6.17.5.1	CVE-2026-84740	Oct 2, 2026
MEDIUM CVSS 6.5	The Events Calendar [the-events-calendar] < 6.18.2 WPVulnerability	< 6.18.2	v6.18.2	CVE-2026-110903	Oct 2, 2026
MEDIUM CVSS 6.5	The Events Calendar [the-events-calendar] >= 6.12.0 - < 6.17.5.1 WPVulnerability	>= 6.12.0, < 6.17.5.1	v6.17.5.1	CVE-2026-84740	Oct 2, 2026
MEDIUM CVSS 5.3	The Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Non-Public Venue and Organizer Disclosure via REST API CVE.org	>=4.5, <6.17.5	v6.17.5	CVE-2026-84741	Sep 23, 2026
MEDIUM CVSS 5.4	The Events Calendar [the-events-calendar] < 6.17.5.1 WPVulnerability	< 6.17.5.1	v6.17.5.1	CVE-2026-97285	Sep 21, 2026
MEDIUM CVSS 5.3	The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation CVE.org	>=0, <6.16.5.1	v6.16.5.1	CVE-2026-13390	Jul 27, 2026
MEDIUM CVSS 5.4	The Events Calendar [the-events-calendar] < 6.15.13.1 WPVulnerability	< 6.15.13.1	v6.15.13.1	CVE-2025-15043	Jan 20, 2026
MEDIUM CVSS 5.4	The Events Calendar [the-events-calendar] < 6.15.13 WPVulnerability	< 6.15.13	v6.15.13	CVE-2025-69352	Jan 6, 2026
MEDIUM CVSS 5.3	The Events Calendar [the-events-calendar] < 6.15.10 WPVulnerability	< 6.15.10	v6.15.10	CVE-2025-12192	Nov 4, 2025
MEDIUM CVSS 4.3	The Events Calendar [the-events-calendar] < 6.15.10 WPVulnerability	< 6.15.10	v6.15.10	CVE-2025-12175	Oct 30, 2025
MEDIUM CVSS 5.3	The Events Calendar [the-events-calendar] < 6.15.3 WPVulnerability	< 6.15.3	v6.15.3	CVE-2025-9808	Sep 15, 2025
MEDIUM CVSS 5.4	The Events Calendar [the-events-calendar] < 6.13.2.1 WPVulnerability	< 6.13.2.1	v6.13.2.1	CVE-2025-5144	Jun 10, 2025
MEDIUM CVSS 5.4	The Events Calendar [the-events-calendar] < 6.12.0 WPVulnerability	< 6.12.0	v6.12.0	CVE-2025-48246	May 19, 2025
MEDIUM CVSS 6.4	The Events Calendar [the-events-calendar] < 6.9.1 WPVulnerability	< 6.9.1	v6.9.1	CVE-2024-12118	Jan 22, 2025
MEDIUM CVSS 5.4	The Events Calendar [the-events-calendar] < 6.7.1 WPVulnerability	< 6.7.1	v6.7.1	CVE-2025-24537	Jan 9, 2025
MEDIUM CVSS 5.3	The Events Calendar [the-events-calendar] < 6.8.2.1 WPVulnerability · PoC available	< 6.8.2.1	v6.8.2.1	CVE-2024-5333	Nov 25, 2024
MEDIUM CVSS 4.8	The Events Calendar [the-events-calendar] < 6.6.4 WPVulnerability · PoC available	< 6.6.4	v6.6.4	CVE-2024-8493	Jul 31, 2024
MEDIUM CVSS 6.1	The Events Calendar [the-events-calendar] < 6.6.4 WPVulnerability	< 6.6.4	v6.6.4	CVE-2024-6931	Jul 23, 2024
MEDIUM CVSS 4.3	The Events Calendar [the-events-calendar] < 6.5.1.5 WPVulnerability	< 6.5.1.5	v6.5.1.5	CVE-2024-37518	Jul 5, 2024
MEDIUM CVSS 6.5	The Events Calendar [the-events-calendar] < 6.4.0.1 WPVulnerability · PoC available	< 6.4.0.1	v6.4.0.1	CVE-2024-1295	May 24, 2024
MEDIUM CVSS 4.3	The Events Calendar [the-events-calendar] < 6.3.1 WPVulnerability	< 6.3.1	v6.3.1	CVE-2024-31433	Apr 10, 2024
MEDIUM CVSS 5.3	The Events Calendar [the-events-calendar] < 6.2.9 WPVulnerability	< 6.2.9	v6.2.9	CVE-2023-6557	Jan 12, 2024
MEDIUM CVSS 5.3	The Events Calendar [the-events-calendar] < 6.1.3 WPVulnerability	< 6.1.3	v6.1.3	CVE-2023-35777	Jul 25, 2023
MEDIUM CVSS 6.3	The Events Calendar [the-events-calendar] < 5.14.0.4 WPVulnerability	< 5.14.0.4	v5.14.0.4	CVE-2022-4974	Mar 4, 2022
MEDIUM CVSS 6.1	The Events Calendar [the-events-calendar] < 4.8.2 WPVulnerability	< 4.8.2	v4.8.2	CVE-2019-15109	Mar 4, 2019
LOW CVSS 3.8	The Events Calendar 6.15.16.1 - 6.17.4.1 - Contributor+ Event/Venue/Organizer Update, Trash and Ownership Takeover via by-slug REST Routes CVE.org	>=6.15.16.1, <6.17.5	v6.17.5	CVE-2026-84743	Sep 23, 2026
LOW CVSS 2.7	The Events Calendar 6.15.0 - 6.17.4.1 - Contributor+ Content Publication via TEC V1 REST API CVE.org	>=6.15.0, <6.17.5	v6.17.5	CVE-2026-84742	Sep 23, 2026
LOW CVSS 2.7	The Events Calendar < 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure via REST API CVE.org	>=0, <6.17.3.1	v6.17.3.1	CVE-2026-84745	Sep 5, 2026
UNKNOWN	The Events Calendar [the-events-calendar] >= 6.15.16.1 - < 6.17.5 WPVulnerability	>= 6.15.16.1, < 6.17.5	v6.17.5	CVE-2026-84743	Sep 21, 2026
UNKNOWN	The Events Calendar [the-events-calendar] >= 4.5 - < 6.17.5 WPVulnerability	>= 4.5, < 6.17.5	v6.17.5	CVE-2026-84741	Sep 21, 2026
UNKNOWN	The Events Calendar [the-events-calendar] >= 6.15.0 - < 6.17.5 WPVulnerability	>= 6.15.0, < 6.17.5	v6.17.5	CVE-2026-84742	Sep 21, 2026
UNKNOWN	The Events Calendar [the-events-calendar] < 6.17.3.1 WPVulnerability	< 6.17.3.1	v6.17.3.1	CVE-2026-84745	Aug 24, 2026
UNKNOWN	The Events Calendar [the-events-calendar] < 6.16.5.1 WPVulnerability · PoC available	< 6.16.5.1	v6.16.5.1	CVE-2026-13390	Jul 6, 2026
UNKNOWN	The Events Calendar [the-events-calendar] < 6.15.17.1 WPVulnerability	< 6.15.17.1	v6.15.17.1	CVE-2026-3585	Mar 9, 2026
UNKNOWN	The Events Calendar [the-events-calendar] < 6.15.16.1 WPVulnerability	< 6.15.16.1	v6.15.16.1	CVE-2026-2694	Feb 25, 2026
UNKNOWN	The Events Calendar [the-events-calendar] < 6.2.8.1 WPVulnerability	< 6.2.8.1	v6.2.8.1	—	Nov 22, 2023
UNKNOWN	The Events Calendar [the-events-calendar] < 3.0.1 WPVulnerability	< 3.0.1	v3.0.1	—	Aug 1, 2023
UNKNOWN	The Events Calendar [the-events-calendar] < 4.1.1.1 WPVulnerability	< 4.1.1.1	v4.1.1.1	—	Apr 25, 2023
UNKNOWN	The Events Calendar [the-events-calendar] < 5.14.0.4 WPVulnerability	< 5.14.0.4	v5.14.0.4	—	Feb 28, 2023
UNKNOWN	The Events Calendar [the-events-calendar] < 5.14.0.4 WPVulnerability	< 5.14.0.4	v5.14.0.4	—	Feb 28, 2023
UNKNOWN	The Events Calendar [the-events-calendar] < 5.14.0.4 WPVulnerability	< 5.14.0.4	v5.14.0.4	—	Feb 28, 2022
UNKNOWN	The Events Calendar [the-events-calendar] < 5.14.0.4 WPVulnerability	< 5.14.0.4	v5.14.0.4	—	Feb 28, 2022
UNKNOWN	The Events Calendar [the-events-calendar] < 4.1.1.1 WPVulnerability	< 4.1.1.1	v4.1.1.1	—	Apr 25, 2016
UNKNOWN	The Events Calendar [the-events-calendar] < 4.1.1.1 WPVulnerability	< 4.1.1.1	v4.1.1.1	—	Apr 25, 2016
UNKNOWN	The Events Calendar [the-events-calendar] < 3.0.1 WPVulnerability	< 3.0.1	v3.0.1	—	Aug 1, 2014
UNKNOWN	The Events Calendar [the-events-calendar] < 5.14.0 WPVulnerability	< 5.14.0	v5.14.0	—	—
UNKNOWN	The Events Calendar [the-events-calendar] < 3.0.1 WPVulnerability	< 3.0.1	v3.0.1	—	—
UNKNOWN	The Events Calendar [the-events-calendar] < 5.14.0.4 WPVulnerability	< 5.14.0.4	v5.14.0.4	—	—
UNKNOWN	The Events Calendar [the-events-calendar] < 4.1.1.1 WPVulnerability	< 4.1.1.1	v4.1.1.1	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.