Event Calendar WD version

Event Calendar WD version has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2021; all 6 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2021 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (83%). Other recurring categories include Missing Authorization.

Every one of the 6 issues recorded for Event Calendar WD version has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Krzysztof Zając.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Event Calendar WD version vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2

Event Calendar <= 1.1.44 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

6 records


2021-12-20 00:00	Event Calendar <= 1.1.50 - Subscriber+ Event Creation Event Calendar WD version <= 1.1.50	`CVE-2021-25025`	4.3 Medium	Krzysztof Zając	Yes
2021-12-20 00:00	Event Calendar <= 1.1.50 - Reflected Cross-Site Scripting Event Calendar WD version <= 1.1.50	`CVE-2021-25024`	6.1 Medium	Krzysztof Zając	Yes
2021-06-25 00:00	EventCalendar <= 1.1.45 - Cross-Site Scripting Event Calendar WD version <= 1.1.45	`N/A`	4.7 Medium	Anonymous	Yes
2021-05-31 00:00	Event Calendar <= 1.1.44 - Cross-Site Scripting Event Calendar WD version < 1.1.45	`N/A`	7.2 High	Anonymous	Yes
2018-11-02 00:00	EventCalendar <= 1.1.21 - Cross-Site Scripting Event Calendar WD version <= 1.1.21	`CVE-2018-16164`	5.4 Medium	Yuta Kitaoka	Yes
2017-06-20 00:00	EventCalendar < 1.0.94 - Authenticated Cross-Site Scripting Event Calendar WD version < 1.0.94	`CVE-2017-2224`	6.4 Medium	Chris Liu	Yes

Showing 1–6 of 6 reports