WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in My Calendar – Accessible Event Manager

Accessible WordPress event calendar plugin. Manage single or recurring events, event venues, and display your calendar anywhere on your site.

20Reported vulnerabilities
9.8Highest CVSS score
3.7.17Latest version
20,000+Active installs

What to do now

Update My Calendar – Accessible Event Manager to 3.7.9 or later. 20 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 10, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-6360 Critical 9.8 63.1% Before 3.4.22 3.4.22 November 30, 2023
WF-cfffe880-e3f9-4163-a726-e248433e1034 Critical 9.8 — 2.3.29 and earlier 2.3.30 May 15, 2015
CVE-2024-1274 Medium 5.4 0.4% Before 3.4.24 3.4.24 April 2, 2024
CVE-2021-24927 Medium 5.4 0.6% Before 3.2.18 3.2.18 November 29, 2021
CVE-2023-23813 High 8.8 0.3% 3.4.3 and earlier 3.4.4 January 20, 2023
CVE-2026-6854 High 7.5 1.6% 0 to 3.7.8 (inclusive) 3.7.9 July 8, 2026
CVE-2012-6527 Low 2.6 2.2% Before 1.10.5 1.10.5 January 31, 2013
CVE-2022-47427 High 7.1 0.3% 3.3.24.1 and earlier 3.3.25 January 3, 2023
CVE-2019-15713 Medium 6.1 2.2% Before 3.1.10 3.1.10 August 28, 2019
CVE-2026-2355 Medium 6.4 0.3% 0 to 3.7.3 (inclusive) 3.7.4 March 4, 2026
CVE-2024-25916 Medium 6.4 0.3% 3.4.23 and earlier 3.4.24 February 11, 2024
WF-a42dce68-0e64-46a6-926e-b676071744b9 Medium 6.4 — Before 2.5.17 2.5.17 April 4, 2018
WF-8de8a412-af19-4a1e-a131-47815b38517f Medium 6.1 — Before 2.3.30 2.3.30 May 15, 2015
WF-d8a56a1c-6af0-47e6-906c-bb3eb1440eb9 Medium 6.1 — Before 2.3.10 2.3.10 April 20, 2015
CVE-2026-11896 Medium 5.3 0.5% 0 to 3.7.14 (inclusive) 3.7.15 July 2, 2026
CVE-2026-40308 Medium 5.3 0.9% Before 3.7.7 3.7.7 April 16, 2026
WF-801132f5-e4ea-4d56-8429-9f33896f6dff Medium 5.5 — 3.3.16 and earlier 3.3.17 July 18, 2022
CVE-2022-36371 Medium 4.7 — 3.3.16 and earlier 3.3.17 August 2, 2022
CVE-2026-7525 Medium 4.3 0.3% 0 to 3.7.9 (inclusive) 3.7.10 May 14, 2026
CVE-2025-67592 Medium 4.3 0.2% 3.6.16 and earlier 3.6.17 December 15, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.