Cal.com
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Cal.com | 1 | – | Mar 31, 2025 |
| Cal.com Self-Hosted (Cal.diy) | 1 | – | Aug 12, 2026 |
| Cal.diy | 1 | – | Jul 22, 2026 |
Exploited and recent CVEs
- CVE-2026-57858 Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking ID 0.4%
- CVE-2026-16624 CVE-2026-16624 0.4%
- CVE-2025-31604 WordPress Cal.com plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability 0.2%