My Calendar – Accessible Event Manager

Vulnerabilities 30Slug my-calendarLatest version 3.7.10WordPress.org →

Minimum safe version

3.7.10

Update to 3.7.10 or later to address 30 fixable vulnerabilities

Latest available3.7.10 ✓
N/A
2026-05-13< 3.7.10

My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter

WordfenceCVE
High 8.8
2026-04-16< 3.7.7

CVE-2026-40308

CVEEUVD
N/A
2026-03-03< 3.7.4

My Calendar – Accessible Event Manager <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

WordfenceCVE
Medium 4.3
2025-12-15< 3.6.17

My Calendar <= 3.6.16 - Missing Authorization

WordfenceCVE
N/A
2024-02-11< 3.4.24

My Calendar <= 3.4.23 - Authenticated (Admin+) Stored Cross-Site Scripting via Events

Wordfence
N/A
2024-02-11< 3.4.24

My Calendar <= 3.4.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Wordfence
N/A
< 2.3.29

My Calendar &lt;= 2.3.28 - Cross-Site Scripting (XSS)

WPScan
N/A
< 2.3.30

My Calendar &lt;= 2.3.29 - Arbitrary File Override &amp; Reflected XSS

WPScan
N/A
< 2.5.17

My Calendar &lt;= 2.5.16 - Authenticated Cross-Site Scripting (XSS)

WPScan
N/A
2023-01-20< 3.4.4

My Calendar <= 3.4.3 - Cross-Site Request Forgery

Wordfence
N/A
2023-01-03< 3.3.25

My Calendar <= 3.3.24.1 - Cross-Site Request Forgery

Wordfence
N/A
2015-04-20< 2.3.10

My Calendar < 2.3.10 - Reflected Cross-Site Scripting

Wordfence
N/A
2015-05-15< 2.3.30

My Calendar <= 2.3.29 - Path Traversal to Remote Code Execution

Wordfence
N/A
2015-05-15< 2.3.30

My Calendar < 2.3.30 - Reflected Cross-Site Scripting

Wordfence
N/A
2018-04-04< 2.5.17

My Calendar <= 2.5.16 - Authenticated Stored Cross-Site Scripting

Wordfence
N/A
2022-07-18< 3.3.17

My Calendar <= 3.3.16 - Administrator+ Stored Cross-Site Scripting

Wordfence
N/A
2022-08-02< 3.3.17

WordPress My Calendar plugin <= 3.3.16 - Unauthenticated Open Redirect vulnerability

PatchstackWordfenceCVE
N/A
2015-04-20< 2.3.29

WordPress My Calendar Plugin <= 2.3.28 - Cross Site Scripting

Patchstack
N/A
2015-05-15< 2.3.30

WordPress My Calendar Plugin <= 2.3.29 - Multiple Vulnerabilities

Patchstack
N/A
2015-11-06< 2.4.11

WordPress My Calendar Plugin 2.4.10 - Multiple Vulnerabilities

Patchstack
N/A
2018-04-05< 2.5.17

WordPress My Calendar plugin <=2.5.16 - Authenticated Cross-Site Scripting (XSS) vulnerability

Patchstack
N/A
2019-05-06< 3.1.10

WordPress My Calendar plugin <= 3.1.9 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Patchstack