joedolson vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 202610

Newest CVEs

• CVE-2026-119714

  My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter

  joedolson · My Calendar - Accessible Event Manager

  Medium6.9
• CVE-2026-104798

  My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute

  joedolson · My Calendar – Accessible Event Manager

  Critical9.8
• CVE-2026-77187

  My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes

  joedolson · My Calendar – Accessible Event Manager

  Medium6.4
• CVE-2026-77186

  My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fallback' Shortcode Attribute

  joedolson · My Calendar – Accessible Event Manager

  Medium6.4
• CVE-2026-6854

  My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters

  joedolson · My Calendar – Accessible Event Manager

  High7.5
• CVE-2026-11896

  My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter

  joedolson · My Calendar – Accessible Event Manager

  Medium5.3
• CVE-2026-7525

  My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter

  joedolson · My Calendar – Accessible Event Manager

  Medium4.3
• CVE-2026-40308

  My Calendar: Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog

  joedolson · my-calendar

  High8.8
• CVE-2026-2355

  My Calendar – Accessible Event Manager <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

  joedolson · My Calendar – Accessible Event Manager

  Medium6.4
• CVE-2026-2362

  WP Accessibility <= 2.3.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'alt' Attribute

  joedolson · WP Accessibility

  Medium6.4