t
theeventscalendar
Security Risk Profile
35
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 18, 2015 to present
6
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
5.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
35/100
low
Severity Distribution
Critical
1High
0Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
3
2
CSRF
1
Most Affected Products
1. Theeventscalendar Eventcalendar Wordpress2
2. WordPress Event Tickets and Registration1
3. Theeventscalendar Event Tickets Wordpress1
4. The Events Calendar The Events Calendar1
5. Theeventscalendar The Events Calendar Wordpress1
Recent Vulnerabilities
See more →CVE-2025-1402
CVSS 5.3medium
Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion
Feb 21, 2025🔧 No Patch
CVE-2024-12118
CVSS 6.4medium
The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Jan 23, 2025
CVE-2024-8016
CVSS 9.1EPSS 0%critical
The Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution
Aug 30, 2024🔧 No Patch
CVE-2021-25024
CVSS 6.1medium
Event Calendar < 1.1.51 - Reflected Cross-Site Scripting
Jan 17, 2022🔧 No Patch
CVE-2021-25025
CVSS 4.3medium
Event Calendar < 1.1.51 - Subscriber+ Event Creation
Jan 17, 2022🔧 No Patch
CVE-2015-5485
CVSS 4.3medium
Aug 18, 2015🔧 No Patch
Monitor theeventscalendar in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.