The Events Calendar Shortcode & Block

the-events-calendar-shortcode · plugin

Known security vulnerabilities for The Events Calendar Shortcode & Block. Find out in seconds which version runs on your site with WP Lens.

2 known vulnerabilities

latest Feb 10, 2026

Vulnerabilities

CVE-2026-24988
WordPress The Events Calendar Shortcode & Block plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability
Medium 6.5
CVE-2026-1922
The Events Calendar Shortcode & Block <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Medium 6.4