Aggregates CVE and security vulnerability intelligence across all my_calendar_project-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk cross-site scripting and vendor risk csrf and related security problems, affecting vendor surface software deployment and vendor surface production workloads scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2023-23813 | Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.4.3 versions. | [email protected] | 5.4 | 0.26% | 2023-05-22 | 2026-06-17 |
| CVE-2022-47427 | Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions. | [email protected] | 5.4 | 0.27% | 2023-03-15 | 2026-06-17 |
| CVE-2021-24927 | The My Calendar WordPress plugin before 3.2.18 does not sanitise and escape the callback parameter of the mc_post_lookup AJAX action (available to any authenticated user) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue | [email protected] | 5.4 | 0.60% | 2021-11-29 | 2026-06-16 |
| CVE-2019-15713 | The my-calendar plugin before 3.1.10 for WordPress has XSS. | [email protected] | 6.1 | 2.54% | 2019-08-28 | 2026-06-16 |