Steve
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Availability Calendar | 1 | – | Apr 24, 2025 |
| Canalplan | 1 | – | Mar 3, 2025 |
Exploited and recent CVEs
- CVE-2025-46528 WordPress Availability Calendar plugin <= 0.2.4 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
- CVE-2025-23616 WordPress Canalplan plugin <= 5.31 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%