iCalendrier

iCalendrier has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for iCalendrier has a vendor fix available, so running the current release closes it.

All of these findings were reported by LVT-tholv2k. iCalendrier is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all iCalendrier vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-29912

iCalendrier <= 1.80 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-03-25 00:00	iCalendrier <= 1.80 - Authenticated (Contributor+) Stored Cross-Site Scripting iCalendrier <= 1.80	`CVE-2024-29912`	6.4 Medium	LVT-tholv2k	Yes

Showing 1–1 of 1 reports

Latestv2.0

iCalendrier

Author

bplace

5.0(5)

100/100

Last Updated

2026-09-03 (9d ago)

Active Installs

700+

Downloads

33,960

Requires WP

6.6+

Requires PHP

8.2+

Tested up to

WP 7.1

Created

2014-10-06 (12y ago)

Simple plugin to display a calendar of the day on your WordPress site, as a widget or with the [icalendrier] shortcode: day name current week number day number month namdeday moon phase Three layouts: the modern one (same design as the widget on icalendrier.fr), and the two legacy ones (compact 175px, wide 300px). Shortcode example: [icalendrier type="modern" language="fr" moonphases="on"]. Attributes: type (modern, comp175, wide300), language, timezone, showlink, moonphases, namedays, bgcolor, style. Languages supported : english (US and UK) français deutsch italiano español português (Portugal and Brasil) svenska dansk română More infos here : https://icalendrier.fr/widget/wordpress-plugin#engsupport Petit plugin simple qui vous permet d’afficher sur votre site ou blog WordPress un éphéméride qui comprend : le nom du jour le numéro de semaine le numéro du jour le mois la fête du jour la phase de lune actuelle Plus d’infos ici : https://icalendrier.fr/widget/wordpress-plugin Credits Moon phase computation: Solaris_MoonPhase by Samir Shah (rayofsolaris.net), MIT license, adapted from Moontool.

View on WordPress.org