The Events Calendar
WordPress plugin ·
the-events-calendar
· WordPress.org ↗
Latest v6.17.5 Last release Sep 18, 2026 Tested up to WP 7.1.1 600,000+ active installs
6
Critical
4
High
49
Known total
0
Unfixed
Running The Events Calendar on your site?
WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.
| Severity | Vulnerability | Affected | Fixed in | CVE | Published |
|---|---|---|---|---|---|
| CRITICAL CVSS 9.8 |
The Events Calendar [the-events-calendar] < 6.17.3.1
WPVulnerability
|
< 6.17.3.1 | v6.17.3.1 | CVE-2026-78159 | Sep 11, 2026 |
| CRITICAL CVSS 9.8 |
The Events Calendar [the-events-calendar] < 6.17.4.1
WPVulnerability
|
< 6.17.4.1 | v6.17.4.1 | CVE-2026-78006 | Sep 11, 2026 |
| CRITICAL CVSS 9.8 |
The Events Calendar [the-events-calendar] < 6.17.3
WPVulnerability
|
< 6.17.3 | v6.17.3 | CVE-2026-78265 | Aug 24, 2026 |
| CRITICAL CVSS 9.3 |
The Events Calendar [the-events-calendar] < 6.16.3
WPVulnerability
|
< 6.16.3 | v6.16.3 | CVE-2026-49772 | Jun 8, 2026 |
| CRITICAL CVSS 9.8 |
The Events Calendar [the-events-calendar] < 6.6.4.1
WPVulnerability
|
< 6.6.4.1 | v6.6.4.1 | CVE-2024-8275 | Sep 24, 2024 |
| CRITICAL CVSS 9.1 |
The Events Calendar [the-events-calendar] < 6.4.0.1
WPVulnerability · PoC available
|
< 6.4.0.1 | v6.4.0.1 | CVE-2024-4180 | May 14, 2024 |
| HIGH CVSS 7.5 |
The Events Calendar [the-events-calendar] < 6.15.10
WPVulnerability
|
< 6.15.10 | v6.15.10 | CVE-2025-12197 | Nov 4, 2025 |
| HIGH CVSS 7.5 |
The Events Calendar [the-events-calendar] < 6.15.1.1
WPVulnerability
|
< 6.15.1.1 | v6.15.1.1 | CVE-2025-9807 | Sep 11, 2025 |
| HIGH CVSS 7.5 |
The Events Calendar [the-events-calendar] < 6.2.8.1
WPVulnerability
|
< 6.2.8.1 | v6.2.8.1 | CVE-2023-6203 | Nov 20, 2023 |
| HIGH CVSS 7.1 |
The Events Calendar [the-events-calendar] < 6.1.0
WPVulnerability
|
< 6.1.0 | v6.1.0 | CVE-2023-33999 | Jul 18, 2023 |
| MEDIUM CVSS 5.3 |
The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation
CVE.org
|
>=0, <6.16.5.1 | v6.16.5.1 | CVE-2026-13390 | Jul 27, 2026 |
| MEDIUM CVSS 5.4 |
The Events Calendar [the-events-calendar] < 6.15.13.1
WPVulnerability
|
< 6.15.13.1 | v6.15.13.1 | CVE-2025-15043 | Jan 20, 2026 |
| MEDIUM CVSS 5.4 |
The Events Calendar [the-events-calendar] < 6.15.13
WPVulnerability
|
< 6.15.13 | v6.15.13 | CVE-2025-69352 | Jan 6, 2026 |
| MEDIUM CVSS 5.3 |
The Events Calendar [the-events-calendar] < 6.15.10
WPVulnerability
|
< 6.15.10 | v6.15.10 | CVE-2025-12192 | Nov 4, 2025 |
| MEDIUM CVSS 4.3 |
The Events Calendar [the-events-calendar] < 6.15.10
WPVulnerability
|
< 6.15.10 | v6.15.10 | CVE-2025-12175 | Oct 30, 2025 |
| MEDIUM CVSS 5.3 |
The Events Calendar [the-events-calendar] < 6.15.3
WPVulnerability
|
< 6.15.3 | v6.15.3 | CVE-2025-9808 | Sep 15, 2025 |
| MEDIUM CVSS 5.4 |
The Events Calendar [the-events-calendar] < 6.13.2.1
WPVulnerability
|
< 6.13.2.1 | v6.13.2.1 | CVE-2025-5144 | Jun 10, 2025 |
| MEDIUM CVSS 5.4 |
The Events Calendar [the-events-calendar] < 6.12.0
WPVulnerability
|
< 6.12.0 | v6.12.0 | CVE-2025-48246 | May 19, 2025 |
| MEDIUM CVSS 6.4 |
The Events Calendar [the-events-calendar] < 6.9.1
WPVulnerability
|
< 6.9.1 | v6.9.1 | CVE-2024-12118 | Jan 22, 2025 |
| MEDIUM CVSS 5.4 |
The Events Calendar [the-events-calendar] < 6.7.1
WPVulnerability
|
< 6.7.1 | v6.7.1 | CVE-2025-24537 | Jan 9, 2025 |
| MEDIUM CVSS 5.3 |
The Events Calendar [the-events-calendar] < 6.8.2.1
WPVulnerability · PoC available
|
< 6.8.2.1 | v6.8.2.1 | CVE-2024-5333 | Nov 25, 2024 |
| MEDIUM CVSS 4.8 |
The Events Calendar [the-events-calendar] < 6.6.4
WPVulnerability · PoC available
|
< 6.6.4 | v6.6.4 | CVE-2024-8493 | Jul 31, 2024 |
| MEDIUM CVSS 6.1 |
The Events Calendar [the-events-calendar] < 6.6.4
WPVulnerability
|
< 6.6.4 | v6.6.4 | CVE-2024-6931 | Jul 23, 2024 |
| MEDIUM CVSS 4.3 |
The Events Calendar [the-events-calendar] < 6.5.1.5
WPVulnerability
|
< 6.5.1.5 | v6.5.1.5 | CVE-2024-37518 | Jul 5, 2024 |
| MEDIUM CVSS 6.5 |
The Events Calendar [the-events-calendar] < 6.4.0.1
WPVulnerability · PoC available
|
< 6.4.0.1 | v6.4.0.1 | CVE-2024-1295 | May 24, 2024 |
| MEDIUM CVSS 4.3 |
The Events Calendar [the-events-calendar] < 6.3.1
WPVulnerability
|
< 6.3.1 | v6.3.1 | CVE-2024-31433 | Apr 10, 2024 |
| MEDIUM CVSS 5.3 |
The Events Calendar [the-events-calendar] < 6.2.9
WPVulnerability
|
< 6.2.9 | v6.2.9 | CVE-2023-6557 | Jan 12, 2024 |
| MEDIUM CVSS 5.3 |
The Events Calendar [the-events-calendar] < 6.1.3
WPVulnerability
|
< 6.1.3 | v6.1.3 | CVE-2023-35777 | Jul 25, 2023 |
| MEDIUM CVSS 6.3 |
The Events Calendar [the-events-calendar] < 5.14.0.4
WPVulnerability
|
< 5.14.0.4 | v5.14.0.4 | CVE-2022-4974 | Mar 4, 2022 |
| MEDIUM CVSS 6.1 |
The Events Calendar [the-events-calendar] < 4.8.2
WPVulnerability
|
< 4.8.2 | v4.8.2 | CVE-2019-15109 | Mar 4, 2019 |
| LOW CVSS 2.7 |
The Events Calendar < 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure via REST API
CVE.org
|
>=0, <6.17.3.1 | v6.17.3.1 | CVE-2026-84745 | Sep 5, 2026 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 6.17.3.1
WPVulnerability
|
< 6.17.3.1 | v6.17.3.1 | CVE-2026-84745 | Aug 24, 2026 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 6.16.5.1
WPVulnerability · PoC available
|
< 6.16.5.1 | v6.16.5.1 | CVE-2026-13390 | Jul 6, 2026 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 6.15.17.1
WPVulnerability
|
< 6.15.17.1 | v6.15.17.1 | CVE-2026-3585 | Mar 9, 2026 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 6.15.16.1
WPVulnerability
|
< 6.15.16.1 | v6.15.16.1 | CVE-2026-2694 | Feb 25, 2026 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 6.2.8.1
WPVulnerability
|
< 6.2.8.1 | v6.2.8.1 | — | Nov 22, 2023 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 3.0.1
WPVulnerability
|
< 3.0.1 | v3.0.1 | — | Aug 1, 2023 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 4.1.1.1
WPVulnerability
|
< 4.1.1.1 | v4.1.1.1 | — | Apr 25, 2023 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 5.14.0.4
WPVulnerability
|
< 5.14.0.4 | v5.14.0.4 | — | Feb 28, 2023 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 5.14.0.4
WPVulnerability
|
< 5.14.0.4 | v5.14.0.4 | — | Feb 28, 2023 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 5.14.0.4
WPVulnerability
|
< 5.14.0.4 | v5.14.0.4 | — | Feb 28, 2022 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 5.14.0.4
WPVulnerability
|
< 5.14.0.4 | v5.14.0.4 | — | Feb 28, 2022 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 4.1.1.1
WPVulnerability
|
< 4.1.1.1 | v4.1.1.1 | — | Apr 25, 2016 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 4.1.1.1
WPVulnerability
|
< 4.1.1.1 | v4.1.1.1 | — | Apr 25, 2016 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 3.0.1
WPVulnerability
|
< 3.0.1 | v3.0.1 | — | Aug 1, 2014 |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 4.1.1.1
WPVulnerability
|
< 4.1.1.1 | v4.1.1.1 | — | — |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 3.0.1
WPVulnerability
|
< 3.0.1 | v3.0.1 | — | — |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 5.14.0
WPVulnerability
|
< 5.14.0 | v5.14.0 | — | — |
| UNKNOWN |
The Events Calendar [the-events-calendar] < 5.14.0.4
WPVulnerability
|
< 5.14.0.4 | v5.14.0.4 | — | — |
Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.