Vulnerabilities

TI-2025-29246 CVE-2025-46528 · GHSA-hrxw-79g3-756c

WordPress Availability Calendar plugin <= 0.2.4 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Steve Availability Calendar availability allows Stored XSS.This issue affects Availability Calendar: from n/a through <= 0.2.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00139 Published 2025-04-24 No fix listed CWE-352

TI-2025-17383 CVE-2025-23616 · GHSA-xpcx-qq6q-cr7f

WordPress Canalplan plugin <= 5.31 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Steve Canalplan canalplan-ac allows Reflected XSS.This issue affects Canalplan: from n/a through <= 5.31.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-03 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Availability Calendar plugin <= 0.2.4 - Cross Site Request Forgery (CSRF) Vulnerability

WordPress Canalplan plugin <= 5.31 - Reflected Cross Site Scripting (XSS) vulnerability