Vendor
Joseph C Dolson
16 known vulnerabilities in products by Joseph C Dolson, 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-6360 | My-calendar: SQL Injection | 8.6 | |
| High | CVE-2026-6854 | My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters | 7.5 | |
| Critical | CVE-2026-104798 | Joedolson My Calendar: Improper Privilege Management | 9.8 | |
| High | CVE-2026-40308 | My Calendar: Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog | — | |
| Medium | CVE-2026-119714 | My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter | 6.5 | |
| Medium | CVE-2026-77186 | Joedolson My Calendar: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-11896 | Joedolson My Calendar: Authorization Bypass Through User-Controlled Key | 5.3 | |
| Medium | CVE-2026-77187 | Joedolson My Calendar: Cross-site Scripting | 6.4 | |
| High | CVE-2025-3761 | My Tickets – Accessible Event Ticketing <= 2.0.16 - Authenticated (Subscriber+) Privilege Escalation | 8.8 | |
| Not rated | CVE-2012-6527 | Joedolson My Calendar: Cross-Site Scripting (XSS) | — | |
| Medium | CVE-2026-2355 | Joedolson My Calendar: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-2362 | Joedolson WP Accessibility: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-3752 | Cross-site Scripting (CVE-2025-3752) | 6.4 | |
| Medium | CVE-2026-7525 | Joedolson My Calendar: Missing Authorization | 4.3 | |
| Medium | CVE-2024-1274 | My Calendar < 3.4.24 - Authenticated Stored XSS | 5.4 | |
| Medium | CVE-2023-34377 | WordPress My Content Management Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS) | 5.9 |
Products
| My Calendar – Accessible Event Manager | 8 | 0 |
| My Calendar | 4 | 0 |