kieranoshea

Top products

The 5 most recently published vulnerabilities affecting kieranoshea.

• CVE-2025-14548Calendar <= 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'event_desc'6.4Dec 23, 2025
• CVE-2025-13001Donation <= 1.0 - Admin+ SQLi4.1Dec 2, 2025
• CVE-2024-2831Calendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via Shortcode8.8May 2, 2024
• CVE-2018-18872The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category cre...5.4May 13, 2019
• CVE-2013-2698Cross-site request forgery (CSRF) vulnerability in the Calendar plugin before 1.3.3 for WordPress allows remote attackers to hijack the authentication of users for requests that add a calendar entr...6.8May 27, 2014