Software intelligence
Important: The Events Calendar appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
30
Latest advisory
6 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
the-events-calendar
Plugin
This catalog lists 30 known advisories affecting The Events Calendar. The most recent was published on 6 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
The Events Calendar <= 6.16.5.0 - Missing Authorization
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 6 July 2026
The Events Calendar 6.15.12-6.16.2 - Unauthenticated SQL Injection
May allow attackers to read or modify database contents beyond intended access.
Published 8 June 2026
The Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_import
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 9 March 2026
Known The Events Calendar advisories published by month.
CVE-2024-5333 · Published 25 November 2024
Affected versions: ≤ 6.8.2
CVE-2024-8275 · Published 24 September 2024
Affected versions: ≤ 6.6.4
CVE-2024-8493 · Published 31 July 2024
Affected versions: ≤ 6.6.3
CVE-2024-6931 · Published 23 July 2024
Affected versions: ≤ 6.6.3
CVE-2024-37518 · Published 5 July 2024
Affected versions: ≤ 6.5.1.4
CVE-2024-1295 · Published 24 May 2024
Affected versions: ≤ 6.4.0
CVE-2024-4180 · Published 14 May 2024
Affected versions: ≤ 6.4.0
CVE-2024-31433 · Published 10 April 2024
Affected versions: ≤ 6.3.0
CVE-2023-6557 · Published 12 January 2024
Affected versions: ≤ 6.2.8.2
CVE-2023-6203 · Published 20 November 2023
Affected versions: < 6.2.8.1
CVE-2023-35777 · Published 25 July 2023
Affected versions: ≤ 6.1.2.2
CVE-2023-33999 · Published 18 July 2023
Affected versions: ≥ 4.9.0 and ≤ 5.16.4
CVE-2022-4974 · Published 4 March 2022
Affected versions: < 5.14.0.4
CVE-2019-15109 · Published 4 March 2019
Affected versions: < 4.8.2
No CVE assigned · Published 25 April 2016
Affected versions: ≤ 4.1.1
SiteRespond Defence matches your installed The Events Calendar version against this catalog when the Defence plugin is connected to your WordPress site.