ishitaka
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| XO Event Calendar | 1 | – | Feb 19, 2026 |
| XO Slider | 1 | – | Oct 1, 2024 |
Exploited and recent CVEs
- CVE-2026-0556 XO Event Calendar <= 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xo_event_field' shortcode 0.4%
- CVE-2024-8324 XO Slider <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%