Description

WordPress Plugin Calendar is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Calendar version 1.3.10 is vulnerable; prior versions may also be affected.

Remediation

Disable the plugin until a fix is available

References

https://wordpress.org/plugins/calendar/#description

Related Vulnerabilities

WordPress Plugin BuddyPress Members Only Cross-Site Scripting (1.8.3)

CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-20716)

WordPress Plugin GigPress Cross-Site Scripting (2.3.27)

WordPress Plugin AdRotate-Ad manager & AdSense Ads SQL Injection (3.9.4)

MySQL CVE-2020-14760 Vulnerability (CVE-2020-14760)

Severity

High

Tags

Missing Update