XO Event Calendar

XO Event Calendar has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all XO Event Calendar vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-0556

XO Event Calendar <= 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xo_event_field' shortcode

Read the full analysis

Vulnerability Records

2 records


2026-02-18 16:30	XO Event Calendar <= 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xo_event_field' shortcode XO Event Calendar <= 3.2.10	`CVE-2026-0556`	6.4 Medium	Muhammad Yudha - DJ	No
2021-09-01 00:00	XO Event Calendar <= 2.3.6 - Reflected Cross-Site Scripting XO Event Calendar <= 2.3.6	`N/A`	6.1 Medium	WPScanTeam	Yes

Showing 1–2 of 2 reports