Known vulnerabilities in The Events Calendar
The Events Calendar: #1 calendar plugin for WordPress. Create/manage events (virtual too!) on your site with the free plugin.
27Reported vulnerabilities
9.8Highest CVSS score
6.17.2Latest version
600,000+Active installs
What to do now
Update The Events Calendar to 6.16.5.1 or later.
27 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2024-8275 | Critical | 49.9% | Before 6.6.4.1 | 6.6.4.1 |
September 25, 2024 |
| CVE-2025-12197 | High | 17.1% | 6.15.1.1 to 6.15.9 (inclusive) | 6.15.10 |
November 5, 2025 |
| CVE-2024-4180 | Critical | 1.8% | Before 6.4.0.1 | 6.4.0.1 |
June 4, 2024 |
| CVE-2024-6931 | Medium | 16.7% | Before 6.6.4 | 6.6.4 |
September 27, 2024 |
| CVE-2023-6203 | High | 0.8% | Before 6.2.8.1 | 6.2.8.1 |
December 18, 2023 |
| CVE-2024-1295 | Medium | 0.5% | Before 6.4.0.1 | 6.4.0.1 |
June 14, 2024 |
| CVE-2024-5333 | Medium | 1.1% | Before 6.8.2.1 | 6.8.2.1 |
December 16, 2024 |
| CVE-2024-8493 | Medium | 0.3% | Before 6.6.4 | 6.6.4 |
May 15, 2025 |
| CVE-2026-49772 | High | 0.4% | 6.15.12 to 6.16.2 (inclusive) | 6.16.3 |
June 8, 2026 |
| CVE-2026-3585 | High | 0.4% | 0 to 6.15.17 (inclusive) | 6.15.17.1 |
March 10, 2026 |
| CVE-2025-9807 | High | 0.3% | 0 to 6.15.1 (inclusive) | 6.15.1.1 |
September 12, 2025 |
| CVE-2019-15109 | Medium | 1.1% | Before 4.8.2 | 4.8.2 |
August 21, 2019 |
| CVE-2025-9808 | Medium | 0.8% | 6.15.2 and earlier | 6.15.3 |
September 15, 2025 |
| CVE-2024-12118 | Medium | 0.3% | Before 6.9.1 | 6.9.1 |
January 23, 2025 |
| CVE-2023-6557 | Medium | 0.6% | 6.2.8.2 and earlier | 6.2.9 |
February 5, 2024 |
| CVE-2026-13390 | Medium | 0.2% | 6.16.5.0 and earlier | 6.16.5.1 |
July 6, 2026 |
| CVE-2026-2694 | Medium | 0.2% | 0 to 6.15.16 (inclusive) | 6.15.16.1 |
February 25, 2026 |
| CVE-2025-15043 | Medium | 0.2% | 6.15.13 and earlier | 6.15.13.1 |
January 20, 2026 |
| CVE-2025-12192 | Medium | 0.3% | 0 to 6.15.9 (inclusive) | 6.15.10 |
November 5, 2025 |
| CVE-2025-5144 | Medium | 0.2% | Before 6.13.2.1 | 6.13.2.1 |
June 11, 2025 |
| WF-9bb026a4-02b1-4422-8c78-9983c49df43e | Medium | — | 4.1.1 and earlier | 4.1.1.1 |
April 25, 2016 |
| CVE-2023-35777 | Medium | 0.6% | 6.1.2.2 and earlier | 6.1.3 |
July 25, 2023 |
| CVE-2025-69352 | Medium | 0.2% | 6.15.12.2 and earlier | 6.15.13 |
January 9, 2026 |
| CVE-2025-12175 | Medium | 0.2% | 0 to 6.15.9 (inclusive) | 6.15.10 |
October 31, 2025 |
| CVE-2025-48246 | Medium | 0.4% | 6.11.2.1 and earlier | 6.12.0 |
May 19, 2025 |
| CVE-2025-24537 | Medium | 0.2% | 6.7.0 and earlier | 6.7.1 |
January 9, 2025 |
| CVE-2024-37518 | Medium | 0.2% | 6.5.1.4 and earlier | 6.5.1.5 |
July 5, 2024 |