Medium 6.4
2025-12-23< 1.3.17
CVE-2025-14548
Minimum safe version
1.3.17
Update to 1.3.17 or later to address 8 fixable vulnerabilities
CVE-2025-14548
CVE-2024-2831
Calendar < 1.3.8 - Reflected Cross-Site Scripting
Calendar <= 1.3.7 - Cross-Site Scripting (XSS)
WordPress Calendar Plugin <= 1.3.7 - Cross Site Scripting
WordPress Calendar plugin <= 1.3.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Calendar <= 1.3.2 - Cross-Site Request Forgery
CVE-2018-18872