Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Jonathan Jernigan Clear all filters
TI-2025-38347 CVE-2025-62024 · GHSA-7fv2-3r3p-ghgm

WordPress Pie Calendar plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan Pie Calendar pie-calendar.This issue affects Pie Calendar: from n/a through <= 1.2.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00217 Published 2025-10-22 No fix listed CWE-79
TI-2025-36286 CVE-2025-58618 · GHSA-qwxj-25jq-q599

WordPress Pie Calendar Plugin <= 1.2.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan Pie Calendar pie-calendar allows DOM-Based XSS.This issue affects Pie Calendar: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-03 No fix listed CWE-79
TI-2025-01212 CVE-2025-1410 · GHSA-v67p-2gcj-7q2h

Cross-site scripting in apexws Pie Calendar – Events Calendar Made Simple

Priority LOW 28

The Events Calendar Made Simple – Pie Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's piecal shortcode in all versions up to, and including, 1.2.5 due to insufficient input san…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00295 Published 2025-02-21 No fix listed CWE-79