Vendors / totalsoft Records 16 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 6
Exploited now totalsoft records in CISA KEV No totalsoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00473 · Published 2025-05-15 · No fix listed
Priority LOW 36
Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00672 · Published 2022-09-09 · No fix listed CWE-264
Priority LOW 25
Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00559 · Published 2022-09-21 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 6 8 0 0
