Skip to content
OpenAdvisories

Vendor

joedolson

12 known vulnerabilities.

Products

My Calendar – Accessible Event Manager 8 my-calendar 1 My Tickets – Accessible Event Ticketing 1 WP Accessibility 1 Able Player, accessible HTML5 media player 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-6854

    My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters

    The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'mc_auth' parameter in all versions up to, and including, 3.7.8 due to insufficient escaping on the user supplied parameter and lack of suf…

    joedolson My Calendar – Accessible Event Manager Web / CMS
  • High 8.8
    CVE-2026-40308

    My Calendar: Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog

    My Calendar is a WordPress plugin for managing calendar events. In versions 3.7.6 and below, the mc_ajax_mcjs_action AJAX endpoint, registered for unauthenticated users, passes user-supplied arguments through parse_str() without validation, allowing injection…

    joedolson my-calendar joedolson/my-calendar Web / CMS Packagist
  • High 8.8
    CVE-2025-3761

    My Tickets – Accessible Event Ticketing <= 2.0.16 - Authenticated (Subscriber+) Privilege Escalation

    The My Tickets – Accessible Event Ticketing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.16. This is due to the mt_save_profile() function not appropriately restricting access to unauthorized users to up…

    joedolson My Tickets – Accessible Event Ticketing Web / CMS