Event Registration Calendar By vcita

Event Registration Calendar By vcita has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 1 is fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2023.

2 independent researchers contributed these findings, most of them (2) reported by Jonas Höbenreich.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage33%

Open

Fixed

Get automatic notifications for all Event Registration Calendar By vcita vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-11870

Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-01-14 19:01	Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Event Registration Calendar By vcita <= 1.4.0	`CVE-2024-11870`	6.4 Medium	Muhammad Yudha - DJ	No
2023-06-02 00:00	Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Event Registration Calendar By vcita <= 1.3.1	`CVE-2023-2406`	6.4 Medium	Jonas Höbenreich	Yes
2023-06-02 00:00	Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.10.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting Event Registration Calendar By vcita <= 1.3.1	`CVE-2023-2407`	6.1 Medium	Jonas Höbenreich	No

Showing 1–3 of 3 reports