~/products/joedolson/my-calendar

pipeline liveDigest Docs

Joedolson My-Calendar vulnerabilities

1 known vulnerability affecting joedolson/my-calendar.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2026-40308P2HIGHCVSS 8.8PoCfixed in 3.7.72026-04-16

CVE-2026-40308 [HIGH] CWE-639 CVE-2026-40308: My Calendar is a WordPress plugin for managing calendar events. In versions 3.7.6 and below, the mc_ My Calendar is a WordPress plugin for managing calendar events. In versions 3.7.6 and below, the mc_ajax_mcjs_action AJAX endpoint, registered for unauthenticated users, passes user-supplied arguments through parse_str() without validation, allowing injection of arbitrary parameters including a site value. On WordPress Multisite installations, this en

Joedolson My-Calendar vulnerabilities | cvebase